last executing test programs: 1m42.726976906s ago: executing program 4 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 1m42.648302613s ago: executing program 4 (id=349): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff010000000000000200130002"], 0x98}, 0x1, 0x7}, 0x0) 1m42.596687688s ago: executing program 4 (id=351): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRESOCT=0x0], &(0x7f0000000180)='GPL\x00', 0xfffffdfe, 0x0, 0x0, 0xc2923d8069fa73c6, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0xffffffffffffffe3, &(0x7f0000000380)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x3ff, r0, 'id0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x66f1, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x20081, 0x8a) pwritev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r6, @ANYBLOB="00032cbd7000fc320e000000f85a1a82b5bf8f5b00000500050073fac93422d845050002003d000000060001000a0000003c00018005000200", @ANYRES32=0x0, @ANYBLOB="060005004e210000060005004e2400000500020000000000080006000000000008000700", @ANYRES32=0x0, @ANYBLOB="54000180060005004e2100000500020009000000050002000200000008000300ac1414aa08000300e000000114000400ff0100000000000000000000000000011400040000000000000000000000000000000001080003000500000008000400540b0000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) 1m42.450881901s ago: executing program 4 (id=356): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x10c000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000540)={0x31, 0x401, 0x7, 0x6, 0x3, 0x3}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") unlinkat(0xffffffffffffff9c, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYRES32=r2, @ANYRES64=r4, @ANYRES16=r3, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r0], 0x48) r9 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0xd, r9, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r9, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000180)='kmem_cache_free\x00', r8, 0x0, 0x1}, 0x18) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) sendto$inet6(r10, 0x0, 0x5, 0x4000042, &(0x7f0000000200)={0xa, 0x4e24, 0x8001, @remote, 0x8000010}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES8, @ANYRES16, @ANYRESDEC=r8], 0x48) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 1m42.020814418s ago: executing program 4 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 1m40.180548262s ago: executing program 4 (id=406): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x9, &(0x7f00000002c0)=[{0x7f, 0x3, 0x5, 0x9}, {0x101, 0x2, 0x3, 0x401}, {0x2, 0x5, 0x7, 0xb}, {0x7fff, 0x7, 0xf5, 0x7}, {0xc09, 0x8, 0x12, 0x3ff}, {0x2, 0xe, 0x8, 0x7fff}, {0xff, 0x1, 0x7, 0xa}, {0x8, 0xc, 0x4, 0x7}, {0x10, 0x9, 0x1, 0x7}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x1, 0x2, 0xe4, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1m40.145561285s ago: executing program 32 (id=406): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x9, &(0x7f00000002c0)=[{0x7f, 0x3, 0x5, 0x9}, {0x101, 0x2, 0x3, 0x401}, {0x2, 0x5, 0x7, 0xb}, {0x7fff, 0x7, 0xf5, 0x7}, {0xc09, 0x8, 0x12, 0x3ff}, {0x2, 0xe, 0x8, 0x7fff}, {0xff, 0x1, 0x7, 0xa}, {0x8, 0xc, 0x4, 0x7}, {0x10, 0x9, 0x1, 0x7}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x1, 0x2, 0xe4, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 24.919989702s ago: executing program 3 (id=1719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000580)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 24.82927025s ago: executing program 3 (id=1720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x80000000000725) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000b00)='rss_stat\x00', r2}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000380)={[{@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@usrjquota}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x961}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000002f, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) getpeername$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x80, 0x80, 0x10, 0x6, {{0x28, 0x4, 0x2, 0x2, 0xa0, 0x67, 0x0, 0x4, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x1e, 0x1, [{0x5, 0x2}, {0x5, 0x10, "0dd7550291bdf8bd0c7c64e65ad0"}, {0x1, 0x6, "0742c29c"}]}, @cipso={0x86, 0x5d, 0xffffffffffffffff, [{0x2, 0xc, "fda19fbf9c29146fcc56"}, {0x7, 0x6, "1c1295c3"}, {0x0, 0x3, '\t'}, {0x6, 0x3, "bf"}, {0x6, 0xe, "3369374ca66d087028561526"}, {0x2, 0xf, "5aece1baca76c7b01753d947d4"}, {0x6, 0x7, "f67210f6ce"}, {0x1, 0xf, "adce88c516d2f3f859524319a5"}, {0x1, 0xc, "4423630ba1c6f818564b"}]}, @end, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xf4, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000013c0)={0x450, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x68, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x10}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x114, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x110, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x450}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r13 = dup(r12) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[], [], 0x6b}}) 24.71816608s ago: executing program 3 (id=1722): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x186, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000104000028000000", @ANYRES32, @ANYBLOB="6635d11b0000003b9914", @ANYRES32=0x0], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00'}, 0x18) nanosleep(&(0x7f0000000240), 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000240)=""/188, &(0x7f0000000040)=0xbc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300007639b300bf0900000000000055090100000000009500000000000000335afcfff0ffffffbf91000000000000b7020000010000238500000085000000b7000000000000009500000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) signalfd(r4, &(0x7f0000000400)={[0x3]}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r6 = socket$key(0xf, 0x3, 0x2) r7 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000380)="a8da49f7da022c5709d240eca9511a1912c29f442b69e8d9af11114f6c6175bc8eaf224aeae09cdc566e81f8da91317f7cd9260ff31a143e84532680c6f39908e024e44db1f851df3f1df31f8a800cefd6e9a3858ec614ded3e69dcef142f9766b30b85b74830b4b6ebe87", 0x6b, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000280)='user\x00', &(0x7f0000000300)=@secondary) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300030c0000000007000000000000020009001000000053bb00000000000003000600000000000200100000000000000000000000000002000100000000000000060d00000000030005000000020002000000ac1414000000000000000000"], 0x60}, 0x1, 0x7}, 0x0) 24.717742339s ago: executing program 3 (id=1723): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000180)=""/1, 0x1) 24.665313464s ago: executing program 3 (id=1724): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0), 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000004e40)={0x8, &(0x7f0000004980)=[{}, {}, {}, {}, {}, {@fixed}, {@fixed}, {@none}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x398fba87178c1956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) sendmmsg(r8, &(0x7f0000004800)=[{{&(0x7f0000000280)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)="b4810e695511d61d18f977384908b69678dce5e9d165687ef80d87761f709525e1234cf89be816e1c2e57a9b6220a0cde98403db030c2491dfce9458528a0be2f1ee5f247c4bc26fd569cadbbca3a3a3159b3912566ec7732b3380e9a6a14c4e10a0e8dce6951572b26eccc1635f4fa535e5266c7fac742e657b1a3447eaceeeaf6737e3e2864288597a4fa2b37c4cb46358fcbfaaed8bda1ea652c33823536292e36df625", 0xa5}, {&(0x7f0000000700)="2a433bf1fc2007d08fb24df11c77b38eb7a3d36aeaba1b2f0986a8f4ce8df9e8cfc380d6ac9357bab6354ac35af93daa525380f4f54bc69b309733373c7a96651c828bde09015226a475d87b3354ae0b3a98dfd91633fc86e18e515ff728d55a051b342e30727ee7c10981a406a64ada3f51a23907cd1d9c3ccd08dce91994e5abdbf2460594bd122501f36c5a0a24ba2659344e8b1ff52468544d5b2e208a51653888211536e03073a2c5801e71b4628fd3ba7cc80c0ef786680216a7716f788bd910243069d983778ca38bbe1a443080246b1b723f7f87cfb0cfe519a047f5352881f6b00c9b0578", 0xe9}], 0x2, &(0x7f00000001c0)=[{0x20, 0x1, 0x180000, "60d586db2537540c6cd4541354"}], 0x20}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="5a58443f43041f2a7d78800cc7a595ea49cb8cdc99800bb4bfdaf5495412bb134b90b0", 0x23}], 0x1, &(0x7f0000000840)=[{0x28, 0x101, 0xeb, "cfde0d8f060e02563f5d217d6d57526806d8"}, {0x1010, 0x110, 0x5, "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"}, {0x68, 0x183, 0x3, "4d1cd3930b5c81dc44fc58c38c4969e73e100cfd50f91fff93d9e00c71e5654ff00e678b79969ec644e66d393eb1633726f729ff1729652cb7e40b04667e2dd1c329c12a65a9d554bc3c23d124d926889e"}, {0x110, 0x10d, 0x2, "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"}, {0xc0, 0x11, 0x8000001, "fd2057a2b0e5a9d8278f4b91a777bc7a1d674035b2328734746329413ccc92096442675bdad19f7db7656b332b4c62bebd2e8393c0a65d87d65d4546b12e13d76d94f327b189dc1ed9c0efaa3fa7768b6dede27d8314eddc2bbf368d659e1a0bdf2bc745897a430360fa15088749c099d816566370afa4b0cbc66f70a240ebc0d338354553dfa3832505552770201f2f3a1985a0991d89db29f3d04a0b47aa28b1d1fa42b570cf712440cf"}, {0x30, 0x10c, 0x296c, "2a51f63db1af60897ebfa24602e6f75bc316a5a3b5de07ccc2cd069882"}], 0x12a0}}, {{&(0x7f0000000580)=@l2={0x1f, 0x7, @none, 0x3}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000001b00)="a86b0c48e3d2ada91bede6bb467c7925a7dc35079d08c8a57fd5ee4a1e2d9613eb4bbe8fa41d1fea7b90f21bbe8cdf3b9f0e033511bc2e851b206cc6e6d79a503865cbaa32ca6f1f40e6d506fce4362f5cec76c868938240d0e4778261fde5e4b26b56b1b2b49712b2b171b9a4a414fd79e94ff2817eaf581ba7c43510c191bb542f44", 0x83}, {&(0x7f0000001bc0)="d598d8fc0fa5ce", 0x7}, {&(0x7f0000001c00)="bf86b822625137b79d2c9a2c991299eb3a20afa9d6af8b89d9f7", 0x1a}, {&(0x7f0000001c40)="b492ef5ef46761989ce0dc6b9779b07d168625b6f354c62473c616124151be5e13db379cc5b4429decd6f930adb0715a29782f40df36fa4e3132d4470f24bc3b14acc8fc50b28c71b8d58e3a74aeeeb57f2f594450cd1bbdebabdbb2c6ff634dd8113e9cec3ed9ac3b05708ec37e011d5aadfa5899f21f4c448e32b7975c09b0bf3c6875aae3805ebd3d19b463a7c6ce6bf94bd037c020300dba317e4b7c5d85a1c9c321cefc3f68fa0f6ea6bc10c82ed3703fd2572efeb4c916fe6b8eb83b3136d824a4f21753d1095648f75b8a9848f036bb7536646c5ac2b4618aa3dc39983a03cd87e739a9232563af697779c60a3ae3f56622457551e5e4f75dfbb37189de594a194df71d3dcad63d12b615a900ef5fd197d47fd54f7a1964f15873a56fb4a3ecc4d1ff33f1ecb850915644b1b8731b62805c5f8c58f35046a9d45e7c38c9991b702c9f0a33847786b4ea9349c2903b1ce91c7feda6f6596eacc44fd8e185c93ba1ef787fedb82e614b813724a31d9136caaa6f58d1c88fc65a58f29c2c6f51eaab08fa7b9e0be6d4349e8eb7cdc764df1e53b2af422bc4d59b20a74e48a7807d06b2585dd87e12e73076ae1fe3fb24722e2e17df1115a42b5b8c775744a7f8181c085ecc077d6e95d35ad8d768c849c3706281bb70f1f4d1d8ea774825272cd5ca786c75298847cf82f669c211338a3c3353916c739245a3953e7e75ab406a3fe2ddebad08d325b4dbd57d156e6fc20bb66fffaad1d5dc88ee836fba4e14edd9bbe6c70153fed2350bb68d8367006ff81c09b2bd3ac684914ca0fc1361838ddbe8387fc1de90aaee734301f78ed2b5d33b1fd576b9bf0d507d842a94fe54809911507e188a87d3c4052674cdee67ab802ef5b59df2b3ce40a29c3f95377e542efc7eec0c45a8c1c0740bca4cc5a59e91cae20348acd0e02ee4585acacc7990612fd1e0236817bafe494a0e5ccd7801c5cdd3cd1649835ac5ad30d9fcf7f439c05e6d07c41a178632eeda8e94b1f2a251b20e27ab1196af262d30638996a431be6e53e3df79ad0ba83580b045b41f73fc0d8b999d82e4bac61bfe53ef63daf6ac0a2f93fa678200eb5fa607ac481c803d9711dc9f771ed191439411af4b479367fdcdc3d0b3271dd4e4791cb7ab84d0620f1f5322c308605dd9e8ef25be6acdf7e055b2d5e39e76ee08c666064e4479f4fd2dadd0a7c38708e927b58ad5e81dce21333c13408ffd1f06932d2b835e26176e9125cd92a4ebc41c78cce38192546f522e28a78aab046097e74ef80952e1d48a5b0b450096ef6a95d28802165ec00ebd69ec36cc2356951978a21d5b0795797dafbf871ac18566c39923efe297b4a2b44653bace77e4a546e5547d19892a046acdc6d98caadee18ae076ba0302dd4e59ad89c5b7f86be4c4bbe73051fb844f122102250b3d83a7c8dccef9ed349c79ae66e8721c95cbea3dc91d36eb874c24da220fa4100bae5b78d7fe4c5441359d45f6dde41ce5b4a5eb1c6b7977940b04ca7f8934c2a7f9f6be5cc141dfd75a9adb7c947caa0bd8e25343ab005848a7014a72c2266728420c2c873b1247b8845cd2e8dbb6a3cc7863de673c24f998f3d43e20dd0de91d18eca3764e7c3f7137e1fe359279cc65daf77ba9fc33e4f18b707904eb636d0e3c510093fbb07b972dc90d091ce9d5ab8462ae96ca16d5cb32fc2e93dfa5f6d974d419430ca071dca1a6cafbc7490eed858b8d376611578d18e39869e4456e9db88742867b8cfb6eb7268357da0c814d6a53ec542c3b5fa294a7305df536969826503c1e86b3aae25cb421f3446b3dc53ccdf1d7399c71eef96a4d7c7c32f5765a791b16c6142b2548aa92e2e629bc963d9c36066cb03ef792e7ac6ca1ee7bcc0be2d54ea5011ea9527957ad5f03e2cd4f2e766ea1766153d368257419176065d1f3e0a7320edb4ff4b230de6c29a96814a2b23434842ec8f51b6dae8852d4755ebbf7ef16876b8dfff1a201f1903506f1fd65bf2ef90010d34600515856822cc3b3df6bcfba9eb2e86bc62cd9ce02e3fc4517679a49f4f48b2bf7bbdac3ad5db46d8a63209ffef29a542f6ba62035f3f97a67466e90fe97f41038f0c95aedfab2a103591be8a3abfd6a11c1106ff172fd506f907e85dfdc4241828f9ddaa270b7ff257457439a20b152101c94c259ed2d3fc8df3be1bb3f5bda63e07a5f2cc32cff6614c71c342691aeb1a0374aa9da1ba15f6f94df9e552ab37858bb72d49b77c77cacc16fb21b45ec94363259e6e6b0d09dbd7ff7fda2f9659a5ad26b406574180b45678eabfecc82ce0ee635ac2c4f0ebcfede1e962773ced43f827c3457c48d79b08089c663653b114a93a538891b49d762698e1c7691c9712c35b3382efdaf5927010ed05aaaaec394cd02615a0f16f68b6b270246b333dd885241f744ef29cc5379e10278505e13d2717e9025c092d4c6871a38f2c7d8740c78903d4edf9df1b6c3ae013678f246ca6a95c0c7f12d4aff8dffd92e1c776efc257e7d2ec4fee36a40fa1c0ca6504b9e79738627d36595ef8b2c0fcd1cdfe5f0c28a9ccdc14682d580adbd5de626d62b2a894cb14eba37cd261faa4c092a1796e6a5e862625e27dbfb8f4e557cad0a52643cbf3eee641ba9e8211247c275498a6cc9f10d36edef247029d95a561a58dfc510317d3366f045e2d97da4681afe4b40dcac07a66a2583120943dfd206b0bb693f1371f3fa94e560be80584a11a8b3390e71446bf1987d6488376ff0e976d12f1880885c741efb9d6261a4c2d023dcab2e68334df0be299a4777f7f8e3114ab2fca90ce6a25e01d8a7a9f894be0c9b2546f4eee0b882eb4ef3a837e469d9669dae972e4b445d1fafc3bfd57d79439e21ecc2837bd1981aba2bb1c19ae2a347cb27617a73db657eb335efa8389d0b266226d03a945dc9b68f8a1fa9224c4a8c10f77d9548298df1667f45b16d1e16a0861783ff53521452b6cacba7b61aeb2805d718e5b2d1efa660da6c9197fe3da82d07ad773e14d972ed8341c399d392dd4cc6b61f4cffcc2b052c693534bafbd33ef1d35e7c9a7bb76116ff0e521aba3695eab7c7a805dab963b05f6d924b5e6c2d3dda8b3970a6555513d9c544df47db0c20f4221409ae1774612a30d48b43493c707df5a167ba858948602e2691df0a12585bb7420aee9d47306febc5cd2394c7e6536d9a6053de8a9e0a0f33a509a0405dcf0f37b71aec796a693a0155950f19d6dc94dda56b5e2d801e6984400d11a18346d29a715c0442bd7165f5786bf688c36c51a4402ede5fb5ae3f064b707ca4f34b91cd692451d1c77de6819659c31c4d455d333adf50a067b5bda3b3e9813647df752d9e52a1528ff9e71e241710a78305dce3963b30a17ce712e1e29db61bb32e81ddd403659ffc515ea27fc35468e8947865cfd54dd8c3894f5b0be6265c8ba32218b468a1d70b6208386ab1a0dc7e4c1a26d0e0d649b106dc1b9d9ec2a9ed7cc8ef541a8f76675a9c3b8e69b4a4fd2d2b10032e1f414dbb814b2c6b085a6eedb15b91ac9c5f07edc94825dc20e7be5f0122678d01a68b1042f176888cd3da5847672e45b39d0af75521db5842aeb2a13b00d0347f74b1d95a237827c4279a5f3809fba008c18f24e03aa81cb94009b693c2599af64cb9b46a4806c21df232d053f30341078609ad42fe13e795c298e12c494f55734579ff614f5bfcf771b37b91a1905a8f145f3d3237e7510a6df8cb5a46c6b80ccc045193c9c26ce33809fe79b84914ef65902520b0ec0800dcecedc3dea78b93efbea573abed0bd34be67edda2f3c13bcc1d74f66e72ac6d3ddf8bf7742c061e6ba2b319232493b678f463ffeb157741b1b6429dda5945cbca5665bbdcc9c70713b82bf46fcd6bb57a5b1c792bdd2e334baa82f03c4600a9fa2dcc6a4bd6490db25f153fe4035b720a9e860807fc21f0b206f8a28d4fe2b5caad6691b80e839bc776d03c3569b66463a3d5b645aee7a9e19fe1aee566c26434a58f00a0c3812a5122bd4b721ab22f129bc1f89eb1f6e227bba479376b9a8904469f6ab346e1cba59119e1e807b328f392a819e4643bceddaeb400b7e56a16cd4e4859370def870f32c9c27244f9f38db4cb66cca3cbfac93e69460b34b8f5a6a45aa3b9e72874a414d02b6b2168adf3287ebb2c03f85c5b6ca4260a04b028209143b117824361a381db18aa58f3e2b41d55b995c6cd59ae6489d13d3a353a3a7dd14795274518bd98c9237f780f617ff8d7428fe02e66036417ce733222d49e0fd48249002a06f6d5faddfc236c5c359d50e51eb378201915684eaa95a437f057b8acd9e8d26ba1b8e2143f2b128ba3467655e6d29efa0322130cca9e1d5b6290cfe5b973cd29f69c212cdb506f1cd22256eb924c5fe1313eec05714e3a99ed729ce3602bb29d6d37fd95f0bff86e645d8d0698f9fa7ed69ce73abc404a62db95cea8e919e4b07fb708d779dfaa92b02d865155d716b1163413046a8ffe39fc44488dbf669a17b37da8b24dcd52aa2777f84ea6fbeeae7d5257ce3f53b62b46d554c80a81763dd65acef48207fc22dc9c23e542711158c1e1b312fffc6261da7f789b7f4ed39a5d00f85394aa1e6d4339f68990aa16aba8e3b879108878ec4e6dbbb6e91a731e24a9d7c2bb7f066eba1cec76760a3cf6246bcc6950a890aa3cc195c51125d2e4c2cc2e8b723d4c1c2c5456a4c250298421e355bc6d85f7dce20801531faddab1b22e1682da365498b67f0afac3e8a719d4788d5d73dbfa694a9e8da2c2db5a1240477ed009cdc04538747aa4e0821c64a366da8ae5d275c21ccaef45151c95c2f5a7d81ca473a5ad05b04b1357d1c2c54f6165ee3d3b43df383f2d2715d70267d4d47f851e1cbe11d4bd3ce63fb649c2d258f7df1ee85756f1c7e1ab9587c6934097333fd5f27caabdeeee382d465054ec8a5b86daed1dca7025f55af231f9208a8ba32657f9eff015a5e6443f4b489cd8c74703884c9fc5129edcb071b91ebac0780e249a79366b14cc28e8b9e277ce8bc9d0e2c76ca72700fdcd03f8b96cdf77ff8376c1448a44c8917a2a8bdf7f80484c9e6bc6a778869afe9beccb0769e71cea07d5357de776d4ba4a91334e13de15cafc8ab5fc0af2a78b0254fbeeee9deecf568a80e03730079a84ac563afc7327a9952866ad05b19df021548cb3edbd1c857a1ab6f75e18099220d518b31698e408b3a3bbc1ce083ed496058725fbb862708d403ead5815018f2bbf7375b833a6c0daf1d459b6ac8371a09d11f153b6fad0ede79e1656bbb47ece79a590069d3027d1ef801f54573f8b96d85211f7d00bf561d465847fcef7f7764b3209e310549d8f0db55632eb345d33a5abd962fc1a807994d1daf7c73c0aec83ab5f679c0d17464d7851a47c406994336a30204e2959be52e9c38e84c323e210750a122ec02b11837224a565c4402dfa785f79dc80409f3216e415bbc090882c96e1b312cad564175dae6935e4907134aca76c3887ed8db809bc6bc40f9301785e37e41308ba39a732118b74f19c5f95d1281ebe3f55350766b2ca3205f395e3a4b6370fa17242e8a0aed441200be63f83f265c9c7fb8b8dd9105a848749ce59ed2e3ecf31efce011b3816a2b48f31ed9bce87f97a2490e3be949fee21fe15801f2d56f61cd45bd3ba14d97385a3c4e3953a52fb440944766326cc5a078b9feeaa14d6463170e49f10a863b70e241e8c223470b7e4d423ae2a746707a97144725cf49b35541260977d2931e88e1db6820b72f2a8334057", 0x1000}, {&(0x7f0000002c40)="fc626a2fa1c27abb840dd884df983f078effa9b97ed5426f2a9cb96351697c6215bb0baa846c45c1fc52a4c744277eb6aa27599c41f9e5b49c738bd9faff90941a7d020c782b172376f70157d05424b1e36bc1dd97fa32cb165c128c31faebbd5553056cc6eb7550a9670addc1fbafdf396430a1e060eb0e9d54faa84777658725a9fb6b9c198d97d07a93c486418ae303010f899dca47dccc2d9f87794fe153681d3d383b87279741aea2104df691c3463cdf4252a2340deb727c97ef12cb192ce205a578dc97acd23704f7ac0038312e0b2e9e912613a5cc38b7bfb1224d68be644639e49201db681777bec5f708e021ea784a", 0xf4}]}}, {{&(0x7f0000002dc0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002e80)="5b12110f23d00530d83b954b3cee0108f3d3718b8f033a59441cbfd585f72004b0de257f7f3a497007bfae4d49183f503046a8be16d21e5c1601767de632461fec584d51aa8bd227735134105be69640e35b3771a051c0aab918b335a68ea3ed0d0444f9d788240fa31f90221a9433663f4aee2d2aa8aa10d7e0c49af9f5b9cd76429e2068295ec0a526cebc09396ca048c1f9cf586820", 0x97}, {&(0x7f0000002f40)="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", 0xfd}, {&(0x7f0000003040)="404cbe16b298b76c37f1d1b03875a141e06069ef2d0c34c71889026118d31a69b6c0ccc68089435d59ad605fc5d3c793e2bf26ec10d51005f6", 0x39}, {&(0x7f0000003080)="2c36e516e54856b989057392a077095db8d20f681494c63ff1c7405b217f1486a2d5a21fc48148ac2f004e16a33877f389ff3347d2", 0x35}], 0x4, &(0x7f0000003100)=[{0xe0, 0x119, 0x3ff, "40694c100108d7d9689b124bd815b3c42d131df258b40358d5e26f7db10927d2abe4be1c8ea8ae024c6654221854007b9d112e41cab2165ccf77e455233263ad2418c6699a44da3c6e6ec68a1bbc29fdb38a857c937c2c2b2a6f48857e7675a9962caaff64bd5755fcae1afcace14d3a537e646d1449e654bf5e13f04e02d2050b701e3bb5230b007d899e7d6997b085499b33555695f3efded743915af28e547787ef0cdd3a1178c0ef112771bcf2aa8bd054002dc0d4328b83550a709db48c2edbb4dfba8717af265fe875f5d1"}, {0x1010, 0x113, 0x3b, "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"}], 0x10f0}}, {{&(0x7f0000004200)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004280)="c8bd7a68946c98", 0x7}, {&(0x7f00000042c0)="123cb111135376bda3970e44cab7c1fbf98d85e44adb5b53b3afc1c1599a81d3c6c546de7211fa4a0407a0cf1ba67809cc1b40b8b44169edd0400c0317d898c0a9ee9e60b42d1b5107845ecd1d65a783962a01c1fb7ff04bc7fb8826998fe28136fd1cd6a823f8aa9dfdaba6dd3a3ec0f16a6ebef5514ca4fb069c00cb9b7eba3fd0bd31a13a7a0492bac1dc", 0x8c}, {&(0x7f0000004380)="a95bbd1051e17d80f97c922749d3705fdaa6120b8c23718882ef846839fb97359632a87002e9e17a3d67f68eee08d29ebdfb10ea37ffe5379dbb68c5fa5d5754953ab416d2f43dc8b0e132b8912d5834201f6793f646fd67ac7b1dbea63ef74cabcf88022655faab2f5a27a2829550244b08b44c7d667d2f621f622d834581e288332bfc9925be34ecfb47ea856491c860c1dacc8e601992799bf619773d4aafcb89d45e7226bed0e8410304cd2dd41ef9c17f1fe028edffe6f6834e8b26d8325e5bb4ebe90ebc37b4dc08cd69da10fe637f3f9ddf6a", 0xd6}], 0x3}}, {{&(0x7f00000044c0)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004540)="415afbc347f2339b07d2b873d68fdecf2cc3516ec83f74037161295a1519fb187552c518400e2890c2b6f2daa664e3bd65f3f53fef37e2313b4cfac1ebc6fd5e2457e66111fe72893d02165625b16479bddc5021e048806658fe7d09b4fe918bdcec5be9619d1225862c513ee9543ec1eb3abbb011593bba", 0x78}, {&(0x7f00000045c0)="ebab907669c1ec45d3e5fc8debce19899d19e8217f9c704b4b0eaa06e9d997ced306bbb105edab6687ba55078213e660cdcf82555bba16b790bc3fd1199bb57e083c11c7853dbdd1344f5caee5402e4e3a0a", 0x52}, {&(0x7f0000004640)="1bf919901c4f340e237567de02e7f1ab7a4f8bf0e71dfa65449b0cc6ff3c8479db4beb4d97219b0cf8f00523e8bac57a641fde23a928eb2870d0f6feeb0de5907c48facbdfee6a3c672312702717f8cb9f6cd05586a1d834ad5f008a0e43354d1ffab19236a5b5ab27ecb8b3d526552f84617c1bd97f1964673869", 0x7b}], 0x3, &(0x7f0000004700)=[{0xc0, 0x10f, 0x5572b059, "37059473bb81443ca32066d4383e7e62058482b916616d44df0e1c18f85946547fcf7c32241d76898c86fa625fe792fe3a54e048c3e5e98205d3ecf24fc0557160e411aa9dbcc7fc32c20c4b053c030048be1573f2390349744f397873005a7c787347a859b4c9307590058082d6429c9b266d748016d8c2e5457f1753cbdc7c0e35690083997097a5ebbd717075233671b129e9fcced3bc9483024c3f155a395661f4d8b7b1442f6824a9decd"}, {0x10, 0x88, 0x7}], 0xd0}}], 0x6, 0x40040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x100, 0x1a0) r11 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001600)={r10, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r12, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0, 0x1200) 24.515613578s ago: executing program 3 (id=1727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0xce8}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x80004, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0xffffffff}], 0x1, 0x40000001, 0x0) 9.458231302s ago: executing program 33 (id=1727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0xce8}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x80004, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0xffffffff}], 0x1, 0x40000001, 0x0) 2.014382822s ago: executing program 1 (id=1997): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x6, 0x298}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nodelalloc}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) readv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000b00)={{0x2, 0x3, 0x9, 0x3, 0xffffffff}, 0x0, 0x800, 'id1\x00', 'timer1\x00', 0x0, 0x4, 0xffffffffaa71010d, 0x2, 0xffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 1.731748387s ago: executing program 6 (id=2005): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRES32=r2, @ANYBLOB="850000005346000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, r6, &(0x7f0000000140)={0x8, 0xffffffffffffffff, 0x81, 0x0, 0x4, 0x4, 0xffffffffffffffff, 0x20007, 0x9}) r7 = socket(0x10, 0x803, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="07000000270000000802cbb2133cb707111e00005823a297acd2a74959028af1d61ab467efc908c239fecaf1e77f253a13cce0774864d782965723153d5d8bf207f5887be89815c35e41ab6848e753a41732fce97e54c142d5", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000041000000000000000000000000fc5d997019ceed03d46829bbb53576009c6f10aa9a7e9cdce21019b28f85323877472e5d84ae91422c3734ef08f83674ad262cc1901a8dc40601e7f72f481692d65aa42ec37563760c33d555b7e314763512b431285b5888f01dd889d6d709a3b8c8c36e7e2da68ba23dd59e99658eb84547b5bc0618352ca5430a59924cbe2ab0da27c0d189a1a17187737db2c51b2be4aaf55a9ae220a04cd981ea27eb1b8bcddc1564c94603fb2128ed833abc1ab7d977bb10d374b23160a48604cb095622fa74dbe5570130bd6826637700392c0b94ead88cf9d5035619a478ce"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000700000000b24752620b341aba120000", @ANYRESOCT=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl_fd$Q_GETFMT(r9, 0xffffffff80000401, r6, &(0x7f0000000240)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000010000000000000000090000000000000000fd5d217948a910fe7220539d596d1753c32860d6119a3f21b0189a528cbf56815dd0c4d2492ded8282b1112ba3badcf53c0c010e442a5dbd185b558f7001bbd4edfb04b084709f42978e36e81a8d9a2d14022d511bc5d4daf9652ac13fef730dc16e359f42d51b6e0ef1635762bca215688f3b6f5bbb7fba80c4956d17e35728bd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x2000000000000034, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095", @ANYRES32=r11, @ANYRES32=r10], &(0x7f0000000380)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x18) r13 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r13, 0x2284, &(0x7f0000000440)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r13, 0x40047211, &(0x7f0000000300)=0x4) r14 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x13, 0xffffffffffffffff, 0x28f45000) process_vm_writev(r14, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r15, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'veth1_vlan\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x78}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @empty, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x3c, 0x1, 0x5, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa01faff, 'pim6reg0\x00', {0x400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10008, {0x0, 0x0, 0x0, r8, {0xa, 0x2}, {0x0, 0xffef}, {0xfff3, 0x19}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x4004000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) 1.560095382s ago: executing program 6 (id=2009): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580, 0x0, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000000300)) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x20000) ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f00000001c0)={0x0, 0x0}) syz_clone(0x200000, &(0x7f0000001100)="131bcbb4113c42506330e4dc9e5cac3c7f8872cb355a4ca0b6289bd6afa625bbbb2951891274c25dbf2fe2316bab1575932deb0c77b31448217e0879323d8055d943ef09f227f0efd1d470b7c531a8829136e8beb0fb11707e675d0872b56457b983d0479393aacb248aa307bd9bf8f69ad699fa00e7709e125f06dc69aa3e39312f940e7d29289c55e9c7f7687c6ed7611160c5b3af2fed4575b23bd3b03a5c8e6359855f4218673059cd92459aa454a0c5a54e4fee3480065877c854cf5f4295ac7885227a66460431498b8c250513b911da737326b4678f25460aa20f76e7959e7d4187feac84ca464c74c8ca17e173cef9e6ae3a5cd69a291b29e7221e5fb6a4470922f5f8ccd85377165825f184a4e6e094c2e904af45e717b008b5976135305cce6c3ddb0064f0584ca769a9b34abb446335646e5b5d81a5b670c105a11cebcd58b95c17bbd43c078baadeac38dd69664455fc97d1a23e8bd8c83d33ebd94434dae39b26baae01a7a9243e0446166ce0dd62dcd2df1b15fdf0c76d2ba7f156f343ba5108462db58c9469f073cd551d7cae09242fae3b2a03e4f5b7fa5a102bd62ecfe622de0f0ec252299e32e3ec30694bd33624ccfc389376b4d1b5aa306f0dc9f97848975407232e4075484cbdb67b05140e8ee88433ae29b98188296b2876851119e0770467f468f00e1bd90e8bb873b7a05a7fa6dccc2a647fa2857147be0fe56723c16aa7d981633314719a371cd2ad6ab126c3511e250b4dede01838b14c9b88330de71351e13f01c7e4051aca5565cf13285bc7b531cb436976007b76c38740deac9dd39c16c9f50d6ec457babc15108dd7525b4200d1ed4bc054a91d7881974dfa01871a2a35747ab3744c106a34303cdce34ad8564f49f9bf7068f5f352243a910ffd46699cdce3bed5dd626af6ce9929c4352fbed2ea454c1144276ed6f9140083ace2c9159e398c91f8e9862ae056a1456d1634088ef6ec66bc77fcdf7d0148579f405112acc74f81ca6a0db169165af75ae48cd97eaf7a7b52c5f92f3daae3d24b2a17a52758ea3acbee2a35410625ecb7a2c8182b6aa93d681018b6cf088ad9736f11c409d3424a16950dfe1ae72a1ae16f2e51c375a91e12bd3f4d14b0b6580cdcaa4b1160a6f2f3ab247250efc2322d1ef3f0b6e85d82825b51531154dd6ea73b7dfce225dc45f96124fee31779d6b8fd8338e854c4120c60ddb10ddd662ac9729b25c371f0a6343de061854792e1183723dfcdd6afe4d11b7ca81031a1cd3c9680c0f9fd447bb5cc2b57c0809713b4b4b72aa27d00a9a2361cc60e8a6e66ccc0da9d7f2323b577897c6a6dcab73e0f85ab06498a13d1c6d3cd21519b05a3ed163b720cd50d59469adad9b15d1c5e559007be3d54b9a6740d245eb9af430f84ef4e7c4d4c0498f701cf1e5eebe60ed53020cfa082681510fabd10581f1633ae09cc674b0e56d9a6b3e44eda9c04c36cea23e27ab304b257e08f8546b13b313d10b0a4990f33609918d24edcfd35e90735962bd33acccf6879bd3e53c7f42927950f010b90f6e93af612f1ad91faba3ad1a0fd9e6896230309478c21a58120b03a61b74d59effc2fdf0e476334a0b748ef7de812a489285880d96894932fa632fa7624a7b1dbc9ae26804cbc388c68826d62c32970febff178536c366d1d6bafcb7dac38114257645e4c2d54e5dccaa9cc92c7e83f77ccd3ef0a14b768cc3e5939ba1f80fdfe5fe13107fd5d2e7f4f7b4366846ccc45764f39ecfe13436d1aa4be2ce4a2fc299708df04f2f8e374793f43c139c1995d49bf66d7c8335f6f92f19e45be092d1461fe97249e66f965834ae3125b5e38751351a392625023f3a403bdfccfaaca35ce1c6591f99ca1a99616caea2f53148b852693470ff8c0cf80141edbbe83bd7598bd92aefe4579b4abcbf0ae3a6cb4cd5ffa52ace2f9386b6e294c96a9d0e1b2adb9100861734bc06390df8b242df67801b96f2c22f8198dad94f33a8e49b9967cd47cf3295856c55cc526ea2d0d04335e24ff7a92a09aa634a4006945e806b5f72116773783af44d56833046501fc234fb742105a0abb10a53c44f15638d9e6ac09b350905b4a49e5767c1987f62fe1d07b5ed9172ffefbbce6fb036082b047fb427a91ad7eab5722cf5ce9cf62a2a6cbce25a6137d6749403a19e0415ce54ed5d23bd04593ea9d7f179ca48f491cfeda34ccb8753a6c9c529985551e306b91bcad2b7d44c06d8148340a7c3a236370aadc40c44aa9e0b02e856446377b58ac8386f5b2a6fbdecea4b034ee7b40ecd286927ba2071e5bad63b59857f949c28e7412dea1877efefcd7584c2e105dd5930a8d48964e13af7dfd73408325336056121a8bbd091f2d0394e32b1e0dc91588fef591ba47f04c7fedf2d428f6bd04ee6d5436f128239b54e10644fd08ad7f2ab90169a298dc04cff410caeb51bff0f8522ec58a748fab725995ba2d04fac2023e2de21ce5238af07cdfeca1c139d2f890f6fbaa9650bc677e2a49be2dd08070397495e6c71a9c1607ed4c0921e0a4f90b2a1a52faf95931f30ccde0c980d4b122c4dd4f88ad6028f7b9d2bc248c487ce00b3bc916a4b9bb1896000ac2ea76e2e0f69a2a90872d88260761ef1f374cfb7989e133bc2d1d59f071479e08d1d9a16be95ebde5056a71c042f6f3f7a9544dd11db719090184def746c7f3b531bed6df18a440f1aa72a2ff95551bd8da93a3b06f1e4233efbd4594c75e70d739bee57da5619bb5c9eeae17b2bee9a2cb3ead4691a49000c0a4f74bdda10e94ab8a63e8c00119eb618e0a7d2d9ceecee95f2ce4ca09cb16e49d6760d39bee184837f2b2c15ae8828d1c59074ccf4876bd903ed6ba200c743be9e7b6a2c91aaec66c301c90708d4b30f6f00b7e948ea7338678914febcc69765e717f3bf1b20a1d04f3b14e3a755db509ff6e37fe2318a26680bad6156eabd3f7459e73d35ab2546e18f73ee553f9159f75a21399608c723271245a8747a93bde505783f03051c1de18c99e2ff4b124775e94095288faed20ae74a7baa451cfa3ea885ce7853c14a72f819dd62d53759ed6787d9ce52421c27b830a95e8005f2cbbd70a128f3f3c4b3d80f13368eb13a0ebcaf90e96eb2fe5416c725808969498935f4ba03a2a8e9ec440c134acae5b6d07ace4349a575739ff75c6618898e95d6662ca5cac4ba37d69b92c6158dfc5619bdba157c122799f490c3e7f6307b091b03c326bdd128c468f34687567fcc0bbd7da8acabfd7b3b4da85538198b1e684d8f6507c9c3b265e3f7afbf284a96e46538149264371fb16572177d8ae04092863952865031ddba5a5ad9df2fa9236c473248b159493854cff0ef3e97ba3b57d1d9febd2c6310de26be6ba404f624552e63da38c1111f5bbe943e4f12aee0a566a6b61ea1b08cf9f427352f74251b1f89aa35a180c128491873abd67edd10d31b66d78875ed09a03a3711d3425702ee753c238f931c68c38c4c76125f096086d915c12971767c5d1512bca303d0d010558d5553f98e37fdb6fe2f8da3dad323a644e74d8eacc162d18171a0753330a8c5cfcb7e63587df472dd9d76f94489c0af6623a112efae15e1cef6ed9342df55ea863fa1b0da9503a8c21d9f97628a1b807b47b995f6b62169c9b876d6dfa40f10206923e4a859a52420983c6096846d6a6271d383f8ba9edc8197c5f5a3c206230af6471dcc1ae197b5fcea966367c1d7a15eda5c45affb6698f7f8035ab9aa5899c337a7afab78674bbd187aac6c1b6d1212f55962f15e96d387d594ee0f70ac4a2698403be6f4f591888c1a21549f6970e77b4ca60819c89c61f1160037182d4ca06d914d0020c28fdf965dd614f7e3ed6b2694af3a4a40162f756d6150e67029aae9a9204877345f8e56e810db0eb8eb4bddb7bac8bae5d0db8262eb34b09b2e2ea5afc0c8f91b123ac0307b260c563660e472571d21cc71f0c405aa8e887d5ef71d0fd5ee023cb8e48766fc9c589bef40435469c47157b4d5585a7d195a964ebe916f1b7a4618b63fc10055657a653cc623f8aee03040b6f6adba5cecae1b2487ede5ab82af3fa0698e0670bced19f621a428368073e4ee4d536a627f153f805e0ad7d770fda3bbd1118321c30739cd918d0b5a058f7006fae5530190c14381b4872c792466c0be4102c5d58095a9fec076ca2de6314fcf70b8354d8d9bc1a23230b474fac80ab7caf9bb416808e22c09ccd0a22b36ef2e23e48c722b335bce162c47a40af8ee7e5542144e16b78d26384caa361a3cae798ef28c033064a8fe8ccc9ed003d13e91b74a6f73be501762b69482a970f3202cf58d2733699b3889b5f400eb2aa96e32944fdd6621679e4e7868837c22f314e95be868471cf1d5e13339c19c577b7f873289332da0cfaf7d9c4d4e307e4bd78a66a4f440fe3b3a20bb397c6693531dde3deff2342d9c044ec59add93c1746e369e0cc0e5d6a76349a7e28ebd4a3935f28dd4c5e47dff908749e4018df8dab75c32a7f12720d33792e18635550f39a018336b7be77efb33b565487fe717f0e8588446a697ebb390a045de32e51f8df74cba071b9d0f654d208c9e766470516102bfde4464fbc092a563a17c7c2a82729c469e90f89d98557ec37f9f48f291cc6653ea2023bec2f1b3be8878913b0fde2705a913d09299e58069d97296e9cc6d9092cd5a968bebacc7d047e192da43730fc343633c2b5d78a3b04aa33b356abf9da7f1a12e5c918149382188dbe36752a33043f93345c5dd21beeae49a473d5c4b19956477ee3bedce133c0e0729895e025a97202a4d5461ab153d8099986fd50ea2338a70cc9afafb6bc560bba5fe2d42be05096d3e6286b38cfc4c432ea1ee1b4ad851df4f144e5f18a8ff7bd41190e72d32fd569196000db6ea3515954ff096b5fdc868859a2fbba35ae4028647a151e69ab76374f5a9c2446e04c358f46c44a014798ab24ef59b3b6465e752141d322432f0077c258e34326efb71fb9a996d81a9a021b9d12a19f5fff8b3afc3501d7929cfb0c968b1b22a88a65ec28adf5edf3ae6a17c644c17b11e5e7d6ef484389a4e1eb29f7e07a694a0fa0cc9c971a6f45fc59e7f871b9edff7feae2423e914efcc3fb7d5d9c7c995e267931891d0e195bc4739a7eeb459ee4dcaf86b75df0385791912c805aea462a5e57efa59b6439f71da89b585de179f1618ab3306a2694e8fa9bbe86ae97363ef4193bebad7892b164c165f1443b9ed5e88a3ce9e2920948e06029eee81da9c56d97dc7ab9bf78c1173fb81dbc6cb372340c878a32e2e76a831e60499e8e55670eeb576e48e3f6ea7708e0ae83f41b4d31b5efc9ef6ea2965f8e78a52c63f8f3cf25eb209704fda156a20daa3b87fba67b3fabbabb2dcc8fd812f2cfd969f5265d700b4982bd4541fc1ab645a0907905d6db5dcc9c78955fad7f616c984d8a62782cececff73406eeb30a8332136b58012d249f3c65b83595485336c4f5ef1e7f40e14ff09a4d0f1ffffe7ad78d86421e7392a2f6b8d68ab99ce9d38d7f2e3360e4b4c4d90661c0e00fa4fe64cd7efc4438cfb27d697996f2ae05d73e298e6242514e15f2a44a5aefadf65d69a41194eccb34fb015e07cd245981dc2c3602a4d1e8cfe11ad932c608f5e44e8cbca5169a5e02f725bdf69ebc4bc15ff376dbf8c7cce9384da1c0520128fe80ff8554bac73c84a394373c346814aee0819bcc4e011649f0eaaa3", 0xfe0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000280)) unshare(0x6c000200) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdc00, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ppoll(&(0x7f0000000040)=[{r5}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) 1.408737515s ago: executing program 5 (id=2011): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000400)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x5ef8, 0x80, 0x3, 0x385}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r5}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', &(0x7f00000002c0), 0x1000) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, r1, 0x80000) 1.35155384s ago: executing program 5 (id=2012): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) 1.299461235s ago: executing program 5 (id=2014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) chroot(&(0x7f0000000000)='./file0/../file0\x00') bind$can_raw(r2, &(0x7f0000000080)={0x1d, 0x0, 0x16000000}, 0x10) 1.23848673s ago: executing program 5 (id=2015): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x5ef8, 0x80, 0x3, 0x385}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, r0, 0x80000) 1.208864783s ago: executing program 5 (id=2017): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x6, 0x298}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nodelalloc}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2000, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) readv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000b00)={{0x2, 0x3, 0x9, 0x3, 0xffffffff}, 0x0, 0x800, 'id1\x00', 'timer1\x00', 0x0, 0x4, 0xffffffffaa71010d, 0x2, 0xffff}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000400, &(0x7f00000000c0), 0x6, 0x588, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={0xffffffffffffffff, r4}, 0xc) 1.084876224s ago: executing program 2 (id=2020): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) 917.844179ms ago: executing program 2 (id=2021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000000c0)={0x6dd1, 0x88, 0x8, 0x9f9f, 0xcc, "09c7f9ffffff02000800ffe4ab5b00300600", 0x408, 0x80000009}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000540)={r6, 0x1, 0xff80}, 0x8) sendmmsg$inet_sctp(r5, &(0x7f0000002140)=[{&(0x7f0000000200)=@in6={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000001100)=[{&(0x7f0000000280)="aeb8182e349ac72378ed683226d48570e0c43e83847e7393f93f63ba129292f94e01e4f89c464f72f37434f6d69d586b076a82df33076c5e3ab7576d15634f151eea6cfb11b1ca7c7c4bdb73cf0d4eb1e4", 0x51}, {&(0x7f0000000380)="1c993e9cd30bb28471ed557d0b57867c376b542752b334fc7474529b", 0x1c}, {&(0x7f0000000680)="653f89d607f437a3ffa00f19c35969ffa69c27a07381eb788f5e9e19c059c29b3e9127a7e9c822e9bcbb51aa94fdb5d06db865f9529a42f5410066edf51cc81bc2d6c58d56a85f7a3fc4f658154a492ed31a86e36b76bd5bb199c2329ec58e6bd883fe722bb22e5e7866ba0861da315031ede09d4484bbb60076dfbb33125f3fa44a51abc8473d10e7f890eef0e1f34a879306935ac40b87818b7cb313f5c4cab64f9d885d3768619ce2bfbc4812e905683d7c0638f1c591210167733a17e6136d0092a6f7e16439557420e631cba3b770b0095eb8d512", 0xd7}, {&(0x7f00000003c0)="7b601fa16a403a7a7924ad7009f9770336e912d2975c762bab8c98ee0b6d402509ece53b428abedae458270cc65832b7b8a023b9118d60193c56d7aa448a104e3eb079071bee", 0x46}, {&(0x7f00000004c0)="1ed8aec0ea8f95b5407ea0652a360acc0611cfc8c93db776898059ef8ad52aa34f0be77e72d091e8cd24bb5c6a8ccefa481e4bfa8cda13980bc8b0897aeced03e358b8ddd59af759876b49eb", 0x4c}, {&(0x7f0000001040)="8c194a9d1b90e55d135f43c601e17d32b69e6cb1c16e70da70417ab490f1cfd0b08e309b5f220ca2a0ed79fcad2fe53dec566477875465d81f5efff909e473120a3f3d81cc4ef23fc4678dd0780648a1ac3a5619cb928224bcae104c44d70cdf7bad4c6d30198fcebae08edf41ac911ebf044357e9517afffecd0fd8b99874d5429c9c9bd93b204b89a6c9d6111be1f49f3e86d851c680d2b7", 0x99}, {&(0x7f0000000540)}], 0x7, &(0x7f00000025c0)=ANY=[@ANYBLOB="180000000000000084000000000000000700080000ff0500300000000000000084000000010000000800a267000200001400000007000000030000000d00000049270000a01b3a41eea2cc3f52e5ad82b5c6510228cb297a5fa2a16fd6093f4fc1bb7b9fefff1ffca025c5da7638f74227019231e390c6f01c0398c0cfddd2ab16fa8f468f8a5d23d0b4b50445b2b9509437dc166d4e828175b98f3dbfc1d9591c8754f425414d6587900c175882630ecd12995f39ff3a89f5104faa4c54e4331ca63c4cad6ac1cbe13111ebd6a72a3589f382ad063835d67781f66a631dddd511d0667f", @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000500000000000000d80000003000000000000000840000000100000008000000000300000800000000000000020f00000400000005000000", @ANYRES32=0x0], 0x90, 0x40010}, {&(0x7f0000001340)=@in6={0xa, 0x4e21, 0x13ebaeb, @remote, 0x4}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000001380)="6bda7bc57a9d12702a78f55b64c0e486e25dc7fd93f0bcd263ac4b0346c32967e3512760", 0x24}, {&(0x7f00000013c0)="8cac04db1b5b227dad470465c240be6ee75f87be078ce6af7e8cf6e6f5dec76f2d86d85af43fa59977e00830b8d0126fb54474d941617a502879a332a93400d3901c2c3f3c23509d76e2428255db6211ec1ecf5b960106c246ff4446514d4c0137ba2cb94ce4827f", 0x68}, {&(0x7f00000014c0)="a2550ce153b0ea86aa7ece116db54967e5dd26959f5f37a59de529258dd32ca8c17e9124d64e8869872dcf4c95ae2ac38d1feb71bef108f583bd90fead680eab805283fb66768af3527656e962a7e039f9d4f89ef2", 0x55}, {&(0x7f0000001540)="fcd10f8abc550ba2eb89cd6a71af5456e7edaddf46814fb9bf706d0d96e0fa91fcdee0bdecc449c2438d333c6c625dc8bdc014993b26d4947a7eeed02bc635a34a9bad73b9d9b5d4aeb5f0bf16d1c89bf707c9a51eb5b84002ac910c2226b81997930ddd55db8d3a0ea287f7e56aa7e06e714950a142576cffa3836a0cc29286d0bdec4d27bfae6f7ee14810dad80a368ecdd9389fcdb67fd6b252184acd68e860", 0xa1}, {&(0x7f0000001600)="9bad751983d3f47f98aa2f386360a01f54e9cbdf6c252b0193da219261a71036a24f6819bbb20bf4cf7e3016b5aee060d4ac29f96cc269da2ab7481a9e1ea7a6fb46aa7ba25d380de14e97cde11e044380bd5ec77c41a09b4b00ddbbafc36aae7cafc793881097befbf060c8ddb951c44101a79b3ca569cdfd25c4913989205a7dc6b98d868845fb4187db96fff04b6f465e25", 0x93}, {&(0x7f0000001440)="2b2de1b450db14d8358e661b4d9c291044e71b05e8e90f7c39069fdaec23", 0x1e}, {&(0x7f00000016c0)="c73f791789bd26c6b55a5dd1e7363a6903d40a600cf8cd765102c1b509ff8940996810e39c3bd3312ed784a01e6a9393403d706f", 0x34}, {&(0x7f0000001700)="8116b50a10d6d02632b19d87dce552eaf057e6e6d11c", 0x16}, {&(0x7f0000001740)="c0ffaa5426efed806f1127a45b0e619a63ac1f83892da3053a9634f1fc983c389bb7d84ffbd4c222615e1cf29ac2efb3de84ecab6f52d9fe7ed7b6eeab4e47257ac64886a3b09f2569edfa8af1ccf0a939449b7b511ac5a084226313011c8822f44c358687397dd5d863c517ac70afa536", 0x71}, {&(0x7f0000001240)="008cec44755534e2af27e74d158e2333ec8cb7", 0x13}, {&(0x7f0000001880)="6966651183476890078011c92eb541f7304ea0c15ed9f02d8c3b6b614ca6888357a082dcf6ee84fc0bb5b6e60ad9585af766a158f5aba05970dc63a416ce82c358ba5df7b8ca0b9e0d9237d53d59f70cec88a5b2f3068bb3696f347be6cd2c347517ee3e1e44568f58fb861639950d6cab83b2a0b4578659df90e794c72dc55c5e4bd2824944c3b8bf22836c282395947c933ce7857b153eefefcb2964067edb8bfe65a5aec7cba14c74537689b9ff59a241888fac6c48565d6e727a88f536c83835d3913966915aa6c4f15f074245fb3216427dd7bfdda3bcd3f410ef74e25310a2bd858a07", 0xe6}, {&(0x7f0000002200)="ca555bea4e2ef6718ed8f658d9938c20dec87898a9c4eae7131a5888681e066507fc8735c85e14f1ea3ab1528f77f9c5939c11e79f3391d9782e2e7f2fbe739687a22b26926392d46ecd7c616b64ead8dd91c2c93e18a599bf869e245b968a07dd6fb10e244d85ae76637895ec8be56f8015a6f2207286c97f41456ee6021bf8beb080", 0x83}], 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="30000000000000008400000001000000ff00050001060000c10000000300000025050000e1000000c0360000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="180000000000000084000000050000003000000000000000"], 0xb0, 0x880}, {&(0x7f0000001a40)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000002040)=[{&(0x7f0000001a80)="fa3127a03d94f77bf8e655f8130e02b7a7d7a823c36f1f5b8d4e94a9caf8d796e3713514be14d522309c0b21acb6ce21a911b7891158ae126b6a5f3be4346b56e39921852450d609996ee2691ec8e8bf3f07c09c80390f9c0bf0c3a715d215623c8c9ec864462e0975614836b5853959511629bc66a58592e05a5eb110341cb1466284f81ae1b1c3", 0x88}, {&(0x7f0000001b40)="dc8b31fed477fc18d9ce9a0891166ef7848b20d09016439f32a35c752047d86775965177b11760a4d79a447b8228589584246bb30ecba9f23fe4", 0x3a}, {&(0x7f0000001b80)="21552c18bf5b46129951ac3db97f15d1e2a3d635760e9b43bdfd50ff4e50f2224d21232bf7586c7e3d5574467facdf92a76e075352ac47e370eaa13701b980a8b0ab7f5b8aecd0873196", 0x4a}, {0x0}, {&(0x7f0000001c00)="c6d844", 0x3}, {&(0x7f0000001c40)="c4372bcd3020ab8e2aab4f2f6abd99b7396349b1fca7f8f74af7ed3c2dbe2a09513c6138f9773d885c0c5798736cd12851ef3152529d97d3e14ebfea5e9738215d6fe83a0be2ca15de035c92634162e9083613ca796b69a37c7380d7b7354c1ce5249507baf885e4028dbc1d06d85a6442e97262452d2044dc7a7c539366e1bec247cf140993be2515e40e2635c633f1559ad3689f7cade9f2e0914119b97fef8109dc1e6bda4373367b27859ad96d1ec5a0d8b4b2bf9d79eb460993b63cede3e78d4e38581d", 0xc6}, {&(0x7f0000001d40)="51d79cad9ae412ef217d0422fcc6029b6538aa8077f63d9af6398541bfc36bf984ac87e6fc6a85d7580636e03bfb21d701cee9b8318fb29fc42a3e1aceb5bec966ff4652f624237971138f51f9eb3774b2e157e37b470159f63d2caf617fdd3b82fdac24b910389221f495715fc750492738493e1f24a091d9ea637af3da2cca5d47a64056ab46241417bfe32fa539343a91", 0x92}, {&(0x7f0000001e00)="0c5ac19f1a85008d297e799fa4", 0xd}, {&(0x7f0000001e40)="e203eb06cea7be430add9315f9267c41bc8fd098cc0c84ca51711ae614eb36fc85a9a68186d6d5a514f734b2f0fee9dddb0607b8d6600667e0f318fc55f389506e0428db5af2482840e9f9c95c81e44ce9a23b76e73a39abda7f2aae4552ce92c71fe1bb044b5131ec946223684593322604e37f37c1a454a02277bcac1111f50e48b44b0d992a185907e67cac041d6a20d638e523af281f1f33c722232416d0f1eaf8b25d7beb578735d39a49a31d886c33bfbc2e11df51483b2a9700037a0e739f6dd83493a1f6e02cbccd296bb4780cbc7f7591df37a861", 0xd9}, {&(0x7f0000001f40)="d7e4c89aa91070180a80d34c400c2f90358b1cff1d707e4fe248e08ebed0e58369fb67c0c446bd0a50162cf984747566dbd2db0ce3333f4d3ec71ffccc66eaeaad6c934e6a0d7e02ea1ea91b9e33c0dad172836e1de2198ebc92b99fbbf3fb904454404cc7e43c1b824fcc700b5d6698d30d28d56d5429bee214ebcd0d4377b5e6625a3fb12b8baed92c6759f0b7f9a701d8b8af508a66b1d00ddf0f560179704a9e0bc7247b9eb7e8d63d513e930308fdc5ca90e49051906a78746e8c8f830e0247de8a89e5761199d66fc5980a79d0b5d96003b3d87747ebb599e6b21a87aa37f73e019a5c543dc1500ea553e4a06342", 0xf1}], 0xa, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000163d0000000000070000000000000000060000000600000000000000"], 0x18, 0x800}], 0x3, 0x4) socket$kcm(0xa, 0x5, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 915.743069ms ago: executing program 0 (id=2022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095a849b9d105f86b5983d10dfb24b22571428e82d5594587a65df4e11f2a95a581ef5c8cf2102a81a563fd25aeb0e1c4f474e7c4240d03705379852e4ac993212f7019062779bc0ec568884541136006caee1373f30ed55cdee959059e2a0321423fab7ffb63b246a7675c5b1c20ac1e956ef26bef987c509a5705a92f46e6780a9761868dbf9b53516d8f4d492d2172eb9269b49ddc883001abd476606b13e1c2f6469a13598a62eca1a83aed12e12814ae8d9c8e2136b5fb24efb85e10a2f2cef2cd3aace7bd360d86f4d11f642ed6892fc33a"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x9, 0x7ffc9ffe}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000020000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sched_getaffinity(0x0, 0x8, &(0x7f0000000800)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) pidfd_getfd(0xffffffffffffffff, r2, 0x0) 794.04891ms ago: executing program 0 (id=2023): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) lsm_set_self_attr(0x66, 0x0, 0x43, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f4, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000340)=0x4, 0x12) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32], 0x34}}, 0x18) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002bbd7000fcdbdf250500000005003500f1000000050030000100000105002a0001000000080031000101000008002c004f000000055cf7922d93ae9968003b000d00000008003c00090000000500290001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x24040081) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 768.230152ms ago: executing program 2 (id=2024): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) (async) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) (async) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async) r3 = getuid() syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000b00)={[], [{@smackfsroot={'smackfsroot', 0x3d, '[]}!'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/loop-control\x00'}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x3, 0x58d, &(0x7f00000014c0)="$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") (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4801) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000500)=ANY=[@ANYBLOB="1faadb03a9566ca140a0e3320b69512149ad318ff08dbfab7279861913e7ae246c20d79eb26b4a0affcc6ebfec72266d6ef3bc4e1d06fffd0da9e919f5530032de91bb41467ef9000076"]) ioctl$TIOCGSOFTCAR(r6, 0x5414, &(0x7f0000000000)) (async) getpid() (async) syz_init_net_socket$llc(0x1a, 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) 582.993028ms ago: executing program 1 (id=2025): bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) 536.511693ms ago: executing program 6 (id=2026): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="e756d337", 0x4}, {0x0}], 0x10000000000000ce, 0x8, 0x1) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001edff7f0000000000000000181200001624008bd46c60a011b5441574b8498544a6057dbcfbbf1071c0572395df5399d7a50fb0b447019d96710ae88939762a8b2f804f1a63d8f9be30590a82db0ef2ad955da7111f1779971509bdca0fa90023801973a48279c1ab3d2c9ab3cfeaa81e8f11f9af4c033e6d1afd976ccb570d2de0c62275988a3d0d4f77661c1500"/159, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffff2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x3, 0x1]}, {0xffffffffffffffff}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) sendmsg$inet(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) bind$inet(r10, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) sendto$inet(r10, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet(r10, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 506.023045ms ago: executing program 2 (id=2027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="e756d337", 0x4}, {0x0}], 0x10000000000000ce, 0x8, 0x1) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001edff7f0000000000000000181200001624008bd46c60a011b5441574b8498544a6057dbcfbbf1071c0572395df5399d7a50fb0b447019d96710ae88939762a8b2f804f1a63d8f9be30590a82db0ef2ad955da7111f1779971509bdca0fa90023801973a48279c1ab3d2c9ab3cfeaa81e8f11f9af4c033e6d1afd976ccb570d2de0c62275988a3d0d4f77661c1500"/159, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffff2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x3, 0x1]}, {0xffffffffffffffff}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) sendmsg$inet(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 505.022005ms ago: executing program 0 (id=2028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308"], 0xf0}}, 0x0) 447.64681ms ago: executing program 0 (id=2029): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000180)=""/1, 0x1) 416.529483ms ago: executing program 0 (id=2030): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x310000, 0x103f, 0x101, 0x2}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r4, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="492a8937bc15"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x100000c1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) 384.340236ms ago: executing program 2 (id=2031): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) 279.374635ms ago: executing program 0 (id=2032): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) 260.336387ms ago: executing program 6 (id=2033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) bind$can_raw(r2, &(0x7f0000000080)={0x1d, 0x0, 0x16000000}, 0x10) 239.359859ms ago: executing program 5 (id=2034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) pause() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x40000000000000}, 0x18) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0)={0x50000001}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4080000}, 0x54adc8a2fff47367) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 225.82309ms ago: executing program 1 (id=2035): msgget$private(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xed6b, 0x1000, 0x1, 0x2bf}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000004c0)='cpuacct.usage\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x2a) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000140)=0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x100}) io_uring_enter(r0, 0x1b94, 0x106a, 0x62, 0x0, 0x33) 209.992091ms ago: executing program 6 (id=2036): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffdfffffffffffffffff8100219078ffffffffac1414aa4e234e20044190782acd640003ffac77"], 0x0) 180.429154ms ago: executing program 6 (id=2037): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='xprtrdma_reply\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) fsmount(r3, 0x1, 0xf5) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") r5 = inotify_init() close(0xffffffffffffffff) inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='kfree\x00', r4, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x93, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x29, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) 165.955775ms ago: executing program 1 (id=2038): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x1c00, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0xf}}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) 164.254165ms ago: executing program 2 (id=2039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r2}, 0x18) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00'}) 34.225387ms ago: executing program 1 (id=2040): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000180)=""/1, 0x1) 0s ago: executing program 1 (id=2041): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) kernel console output (not intermixed with test programs): comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 89.097491][ T6171] serio: Serial port ttyS3 [ 89.103023][ T29] audit: type=1326 audit(1767452923.896:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 89.130787][ T29] audit: type=1326 audit(1767452923.896:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 89.154332][ T29] audit: type=1326 audit(1767452923.896:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.2.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 89.315320][ T6200] lo speed is unknown, defaulting to 1000 [ 89.328517][ T6202] @: renamed from vlan0 (while UP) [ 90.051254][ T6221] lo speed is unknown, defaulting to 1000 [ 90.231387][ T6234] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 90.242420][ T6232] IPVS: stopping master sync thread 6234 ... [ 90.437001][ T6247] sch_fq: defrate 0 ignored. [ 90.673289][ T6259] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 90.691830][ T6258] IPVS: stopping master sync thread 6259 ... [ 91.135013][ T6254] serio: Serial port ttyS3 [ 91.522815][ T6308] sch_fq: defrate 0 ignored. [ 91.594037][ T6315] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 91.604953][ T6313] IPVS: stopping master sync thread 6315 ... [ 91.711988][ T6314] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.733793][ T6326] sch_fq: defrate 0 ignored. [ 91.775717][ T6314] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.790465][ T6332] lo speed is unknown, defaulting to 1000 [ 91.829499][ T6314] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.859674][ T6334] __nla_validate_parse: 17 callbacks suppressed [ 91.859726][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 91.905675][ T6314] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.946887][ T6341] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.957150][ T6343] SET target dimension over the limit! [ 91.983341][ T411] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.000196][ T6343] xt_policy: output policy not valid in PREROUTING and INPUT [ 92.023690][ T411] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.034924][ T411] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.043539][ T411] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.120749][ T6357] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.167258][ T6357] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.217283][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1015'. [ 92.246328][ T6357] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.286749][ T6357] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.319114][ T6369] FAULT_INJECTION: forcing a failure. [ 92.319114][ T6369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.332284][ T6369] CPU: 1 UID: 0 PID: 6369 Comm: syz.5.1017 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.332354][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.332416][ T6369] Call Trace: [ 92.332425][ T6369] [ 92.332434][ T6369] __dump_stack+0x1d/0x30 [ 92.332468][ T6369] dump_stack_lvl+0x95/0xd0 [ 92.332558][ T6369] dump_stack+0x15/0x1b [ 92.332582][ T6369] should_fail_ex+0x265/0x280 [ 92.332610][ T6369] should_fail+0xb/0x20 [ 92.332660][ T6369] should_fail_usercopy+0x1a/0x20 [ 92.332733][ T6369] _copy_from_user+0x1c/0xb0 [ 92.332768][ T6369] __copy_msghdr+0x244/0x300 [ 92.332805][ T6369] ___sys_sendmsg+0x109/0x1d0 [ 92.332854][ T6369] __x64_sys_sendmsg+0xd4/0x160 [ 92.332908][ T6369] x64_sys_call+0x17ba/0x3000 [ 92.333000][ T6369] do_syscall_64+0xca/0x2b0 [ 92.333043][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.333074][ T6369] RIP: 0033:0x7f87a7cdf749 [ 92.333093][ T6369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.333187][ T6369] RSP: 002b:00007f87a673f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.333207][ T6369] RAX: ffffffffffffffda RBX: 00007f87a7f35fa0 RCX: 00007f87a7cdf749 [ 92.333221][ T6369] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 92.333237][ T6369] RBP: 00007f87a673f090 R08: 0000000000000000 R09: 0000000000000000 [ 92.333251][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.333292][ T6369] R13: 00007f87a7f36038 R14: 00007f87a7f35fa0 R15: 00007ffdc6870078 [ 92.333315][ T6369] [ 92.358468][ T6370] sch_fq: defrate 0 ignored. [ 92.516916][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.527999][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.547786][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.554217][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.566883][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.590072][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.622510][ T6375] SET target dimension over the limit! [ 92.659189][ T6375] xt_policy: output policy not valid in PREROUTING and INPUT [ 92.833052][ T6392] serio: Serial port ttyS3 [ 92.974797][ T6407] Cannot find add_set index 0 as target [ 92.989835][ T6409] sch_fq: defrate 0 ignored. [ 93.005128][ T6407] xt_policy: output policy not valid in PREROUTING and INPUT [ 93.019291][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 93.029440][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 93.071552][ T6412] lo speed is unknown, defaulting to 1000 [ 93.264250][ T6438] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 93.276913][ T6435] IPVS: stopping master sync thread 6438 ... [ 93.385836][ T6446] lo speed is unknown, defaulting to 1000 [ 93.398671][ T6433] lo speed is unknown, defaulting to 1000 [ 93.649234][ T6450] syz.0.1050 uses obsolete (PF_INET,SOCK_PACKET) [ 93.675138][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'. [ 93.684239][ T6461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1054'. [ 93.694607][ T6461] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1054'. [ 93.787645][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 93.867545][ T6474] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.900787][ T29] kauditd_printk_skb: 750 callbacks suppressed [ 93.900859][ T29] audit: type=1400 audit(1767452928.896:6851): avc: denied { create } for pid=6478 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.976293][ T6483] lo speed is unknown, defaulting to 1000 [ 94.020035][ T29] audit: type=1400 audit(1767452928.946:6852): avc: denied { connect } for pid=6478 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.039805][ T29] audit: type=1400 audit(1767452928.956:6853): avc: denied { write } for pid=6478 comm="syz.2.1060" path="socket:[20133]" dev="sockfs" ino=20133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.063187][ T29] audit: type=1400 audit(1767452929.006:6854): avc: denied { read } for pid=6478 comm="syz.2.1060" path="socket:[20133]" dev="sockfs" ino=20133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.103303][ T29] audit: type=1326 audit(1767452929.096:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6487 comm="syz.3.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 94.181905][ T29] audit: type=1400 audit(1767452929.126:6856): avc: denied { create } for pid=6486 comm="syz.0.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.201431][ T29] audit: type=1326 audit(1767452929.126:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6487 comm="syz.3.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 94.225002][ T29] audit: type=1326 audit(1767452929.126:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6487 comm="syz.3.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 94.248570][ T29] audit: type=1326 audit(1767452929.126:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6487 comm="syz.3.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 94.272023][ T29] audit: type=1326 audit(1767452929.126:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6487 comm="syz.3.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 94.406800][ T6506] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 94.517585][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 94.526995][ T6511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1073'. [ 94.599460][ T6519] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 94.610523][ T6518] IPVS: stopping master sync thread 6519 ... [ 94.967255][ T6545] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.557321][ T6581] FAULT_INJECTION: forcing a failure. [ 95.557321][ T6581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.570871][ T6581] CPU: 0 UID: 0 PID: 6581 Comm: syz.5.1100 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.571034][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.571048][ T6581] Call Trace: [ 95.571054][ T6581] [ 95.571062][ T6581] __dump_stack+0x1d/0x30 [ 95.571089][ T6581] dump_stack_lvl+0x95/0xd0 [ 95.571115][ T6581] dump_stack+0x15/0x1b [ 95.571141][ T6581] should_fail_ex+0x265/0x280 [ 95.571176][ T6581] should_fail+0xb/0x20 [ 95.571196][ T6581] should_fail_usercopy+0x1a/0x20 [ 95.571226][ T6581] _copy_from_user+0x1c/0xb0 [ 95.571330][ T6581] io_submit_one+0x52/0x1210 [ 95.571378][ T6581] __se_sys_io_submit+0xfb/0x280 [ 95.571435][ T6581] __x64_sys_io_submit+0x43/0x50 [ 95.571463][ T6581] x64_sys_call+0x2e40/0x3000 [ 95.571536][ T6581] do_syscall_64+0xca/0x2b0 [ 95.571573][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.571663][ T6581] RIP: 0033:0x7f87a7cdf749 [ 95.571712][ T6581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.571736][ T6581] RSP: 002b:00007f87a673f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 95.571755][ T6581] RAX: ffffffffffffffda RBX: 00007f87a7f35fa0 RCX: 00007f87a7cdf749 [ 95.571768][ T6581] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 00007f87a6709000 [ 95.571788][ T6581] RBP: 00007f87a673f090 R08: 0000000000000000 R09: 0000000000000000 [ 95.571805][ T6581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.571820][ T6581] R13: 00007f87a7f36038 R14: 00007f87a7f35fa0 R15: 00007ffdc6870078 [ 95.571883][ T6581] [ 95.994358][ T6560] serio: Serial port ttyS3 [ 96.036958][ T6607] IPVS: stopping master sync thread 6608 ... [ 96.036958][ T6608] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 96.080182][ T6610] sch_fq: defrate 0 ignored. [ 96.211291][ T6616] lo speed is unknown, defaulting to 1000 [ 96.390350][ T6636] Cannot find add_set index 0 as target [ 96.419806][ T6636] xt_policy: output policy not valid in PREROUTING and INPUT [ 96.461027][ T6642] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 96.461306][ T6641] IPVS: stopping master sync thread 6642 ... [ 96.553093][ T6644] sch_fq: defrate 0 ignored. [ 96.576914][ T6648] Cannot find add_set index 0 as target [ 96.609126][ T6648] xt_policy: output policy not valid in PREROUTING and INPUT [ 96.657197][ T6655] FAULT_INJECTION: forcing a failure. [ 96.657197][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 96.670043][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.5.1130 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.670083][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.670100][ T6655] Call Trace: [ 96.670108][ T6655] [ 96.670117][ T6655] __dump_stack+0x1d/0x30 [ 96.670157][ T6655] dump_stack_lvl+0x95/0xd0 [ 96.670179][ T6655] dump_stack+0x15/0x1b [ 96.670263][ T6655] should_fail_ex+0x265/0x280 [ 96.670289][ T6655] should_failslab+0x8c/0xb0 [ 96.670312][ T6655] kmem_cache_alloc_noprof+0x69/0x4b0 [ 96.670338][ T6655] ? xfrm_state_alloc+0x2c/0x190 [ 96.670421][ T6655] xfrm_state_alloc+0x2c/0x190 [ 96.670445][ T6655] xfrm_add_sa+0xf4e/0x25b0 [ 96.670503][ T6655] xfrm_user_rcv_msg+0x566/0x660 [ 96.670545][ T6655] ? __kfree_skb+0x109/0x150 [ 96.670583][ T6655] ? nlmon_xmit+0x4f/0x60 [ 96.670605][ T6655] ? consume_skb+0x49/0x150 [ 96.670675][ T6655] netlink_rcv_skb+0x123/0x220 [ 96.670735][ T6655] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 96.670784][ T6655] xfrm_netlink_rcv+0x48/0x60 [ 96.670822][ T6655] netlink_unicast+0x5c0/0x690 [ 96.670909][ T6655] netlink_sendmsg+0x58b/0x6b0 [ 96.670955][ T6655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.671034][ T6655] __sock_sendmsg+0x145/0x180 [ 96.671060][ T6655] ____sys_sendmsg+0x31e/0x4a0 [ 96.671099][ T6655] ___sys_sendmsg+0x17b/0x1d0 [ 96.671158][ T6655] __x64_sys_sendmsg+0xd4/0x160 [ 96.671199][ T6655] x64_sys_call+0x17ba/0x3000 [ 96.671227][ T6655] do_syscall_64+0xca/0x2b0 [ 96.671332][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.671360][ T6655] RIP: 0033:0x7f87a7cdf749 [ 96.671379][ T6655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.671402][ T6655] RSP: 002b:00007f87a673f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.671463][ T6655] RAX: ffffffffffffffda RBX: 00007f87a7f35fa0 RCX: 00007f87a7cdf749 [ 96.671477][ T6655] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 96.671488][ T6655] RBP: 00007f87a673f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.671501][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.671513][ T6655] R13: 00007f87a7f36038 R14: 00007f87a7f35fa0 R15: 00007ffdc6870078 [ 96.671538][ T6655] [ 96.957444][ T6659] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 96.964255][ T6659] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 96.972499][ T6659] vhci_hcd vhci_hcd.0: Device attached [ 96.983248][ T6663] vhci_hcd: connection closed [ 96.984199][ T583] vhci_hcd vhci_hcd.3: stop threads [ 96.994318][ T583] vhci_hcd vhci_hcd.3: release socket [ 96.999696][ T583] vhci_hcd vhci_hcd.3: disconnect device [ 97.007634][ T6662] netlink: 'syz.5.1133': attribute type 10 has an invalid length. [ 97.020145][ T6662] team0: Port device dummy0 added [ 97.070322][ T6668] __nla_validate_parse: 10 callbacks suppressed [ 97.070424][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1135'. [ 97.217136][ T6673] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.402799][ T6676] lo speed is unknown, defaulting to 1000 [ 97.505324][ T6676] bond0 (unregistering): Released all slaves [ 97.615394][ T6698] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 97.616209][ T6697] IPVS: stopping master sync thread 6698 ... [ 97.790813][ T6704] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 97.791062][ T6703] IPVS: stopping master sync thread 6704 ... [ 97.965769][ T6709] lo speed is unknown, defaulting to 1000 [ 97.999323][ T6712] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1150'. [ 98.043291][ T6718] SET target dimension over the limit! [ 98.083077][ T6718] xt_policy: output policy not valid in PREROUTING and INPUT [ 98.174070][ T6729] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 98.601837][ T6747] netlink: 21 bytes leftover after parsing attributes in process `syz.5.1163'. [ 98.741303][ T6761] sch_fq: defrate 0 ignored. [ 98.930652][ T29] kauditd_printk_skb: 561 callbacks suppressed [ 98.930727][ T29] audit: type=1400 audit(1767452933.926:7422): avc: denied { write } for pid=6767 comm="syz.5.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.933109][ T6768] tipc: Invalid UDP bearer configuration [ 98.956626][ T6768] tipc: Enabling of bearer rejected, failed to enable media [ 99.014222][ T29] audit: type=1400 audit(1767452934.016:7423): avc: denied { ioctl } for pid=6767 comm="syz.5.1170" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.083740][ T29] audit: type=1400 audit(1767452934.016:7424): avc: denied { remount } for pid=6767 comm="syz.5.1170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 99.103702][ T29] audit: type=1326 audit(1767452934.056:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7cdf749 code=0x7ffc0000 [ 99.127188][ T29] audit: type=1326 audit(1767452934.056:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7cdf749 code=0x7ffc0000 [ 99.150923][ T29] audit: type=1326 audit(1767452934.056:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7cdf749 code=0x7ffc0000 [ 99.174428][ T29] audit: type=1326 audit(1767452934.056:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87a7cdf783 code=0x7ffc0000 [ 99.197786][ T29] audit: type=1326 audit(1767452934.056:7429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f87a7cdf807 code=0x7ffc0000 [ 99.221199][ T29] audit: type=1326 audit(1767452934.056:7430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f87a7c96bdd code=0x7ffc0000 [ 99.244666][ T29] audit: type=1326 audit(1767452934.056:7431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6776 comm="syz.5.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f87a7d13e89 code=0x7ffc0000 [ 99.287539][ T6784] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1176'. [ 99.348121][ T6787] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 99.354751][ T6787] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 99.362933][ T6787] vhci_hcd vhci_hcd.0: Device attached [ 99.396384][ T6789] vhci_hcd: connection closed [ 99.396558][ T53] vhci_hcd vhci_hcd.5: stop threads [ 99.404783][ T6739] serio: Serial port ttyS3 [ 99.406768][ T53] vhci_hcd vhci_hcd.5: release socket [ 99.416464][ T53] vhci_hcd vhci_hcd.5: disconnect device [ 99.428534][ T6796] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 99.439673][ T6795] IPVS: stopping master sync thread 6796 ... [ 99.517844][ T6797] lo speed is unknown, defaulting to 1000 [ 99.606723][ T6806] sch_fq: defrate 0 ignored. [ 99.716606][ T6812] FAULT_INJECTION: forcing a failure. [ 99.716606][ T6812] name failslab, interval 1, probability 0, space 0, times 0 [ 99.729348][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: syz.2.1184 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.729439][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.729457][ T6812] Call Trace: [ 99.729465][ T6812] [ 99.729474][ T6812] __dump_stack+0x1d/0x30 [ 99.729499][ T6812] dump_stack_lvl+0x95/0xd0 [ 99.729579][ T6812] dump_stack+0x15/0x1b [ 99.729598][ T6812] should_fail_ex+0x265/0x280 [ 99.729673][ T6812] should_failslab+0x8c/0xb0 [ 99.729724][ T6812] __kmalloc_cache_noprof+0x65/0x4c0 [ 99.729754][ T6812] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 99.729792][ T6812] bpf_prog_alloc_no_stats+0xc4/0x390 [ 99.729819][ T6812] bpf_prog_alloc+0x3c/0x150 [ 99.729837][ T6812] bpf_prog_load+0x506/0x1140 [ 99.729996][ T6812] ? security_bpf+0x2b/0x90 [ 99.730021][ T6812] __sys_bpf+0x469/0x7c0 [ 99.730114][ T6812] __x64_sys_bpf+0x41/0x50 [ 99.730203][ T6812] x64_sys_call+0x28e1/0x3000 [ 99.730225][ T6812] do_syscall_64+0xca/0x2b0 [ 99.730256][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.730276][ T6812] RIP: 0033:0x7ff59bf6f749 [ 99.730289][ T6812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.730360][ T6812] RSP: 002b:00007ff59a9cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.730406][ T6812] RAX: ffffffffffffffda RBX: 00007ff59c1c5fa0 RCX: 00007ff59bf6f749 [ 99.730417][ T6812] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 99.730428][ T6812] RBP: 00007ff59a9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 99.730511][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.730522][ T6812] R13: 00007ff59c1c6038 R14: 00007ff59c1c5fa0 R15: 00007ffc91beba58 [ 99.730540][ T6812] [ 99.972855][ T6817] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 99.979421][ T6817] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 99.987716][ T6817] vhci_hcd vhci_hcd.0: Device attached [ 100.012346][ T6817] FAULT_INJECTION: forcing a failure. [ 100.012346][ T6817] name failslab, interval 1, probability 0, space 0, times 0 [ 100.025093][ T6817] CPU: 1 UID: 0 PID: 6817 Comm: syz.2.1186 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.025196][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.025213][ T6817] Call Trace: [ 100.025221][ T6817] [ 100.025231][ T6817] __dump_stack+0x1d/0x30 [ 100.025318][ T6817] dump_stack_lvl+0x95/0xd0 [ 100.025345][ T6817] dump_stack+0x15/0x1b [ 100.025371][ T6817] should_fail_ex+0x265/0x280 [ 100.025400][ T6817] should_failslab+0x8c/0xb0 [ 100.025449][ T6817] __kmalloc_noprof+0xb9/0x5a0 [ 100.025473][ T6817] ? do_handle_open+0x379/0x710 [ 100.025511][ T6817] do_handle_open+0x379/0x710 [ 100.025545][ T6817] __x64_sys_open_by_handle_at+0x44/0x50 [ 100.025587][ T6817] x64_sys_call+0x2b6a/0x3000 [ 100.025618][ T6817] do_syscall_64+0xca/0x2b0 [ 100.025734][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.025760][ T6817] RIP: 0033:0x7ff59bf6f749 [ 100.025779][ T6817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.025802][ T6817] RSP: 002b:00007ff59a9cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 100.025860][ T6817] RAX: ffffffffffffffda RBX: 00007ff59c1c5fa0 RCX: 00007ff59bf6f749 [ 100.025874][ T6817] RDX: 0000000000664001 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 100.025890][ T6817] RBP: 00007ff59a9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 100.025907][ T6817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.025923][ T6817] R13: 00007ff59c1c6038 R14: 00007ff59c1c5fa0 R15: 00007ffc91beba58 [ 100.025948][ T6817] [ 100.029280][ T6818] vhci_hcd: connection closed [ 100.204805][ T320] vhci_hcd vhci_hcd.2: stop threads [ 100.215073][ T320] vhci_hcd vhci_hcd.2: release socket [ 100.220529][ T320] vhci_hcd vhci_hcd.2: disconnect device [ 100.724700][ T6845] sch_fq: defrate 0 ignored. [ 100.848132][ T6850] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 100.859249][ T6847] IPVS: stopping master sync thread 6850 ... [ 100.868735][ T6849] tipc: Started in network mode [ 100.873746][ T6849] tipc: Node identity aec9c3e5d29f, cluster identity 4711 [ 100.880968][ T6849] tipc: Enabled bearer , priority 0 [ 100.911369][ T6848] tipc: Disabling bearer [ 100.931041][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 100.940000][ T6853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1199'. [ 100.951201][ T6853] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1199'. [ 100.984618][ T6854] tipc: Started in network mode [ 100.989569][ T6854] tipc: Node identity 162833d34ccd, cluster identity 4711 [ 100.996792][ T6854] tipc: Enabled bearer , priority 0 [ 101.006540][ T6851] tipc: Disabling bearer [ 101.039757][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1202'. [ 101.108754][ T6863] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6863 comm=syz.1.1203 [ 101.196640][ T6866] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.274772][ T6864] lo speed is unknown, defaulting to 1000 [ 101.313014][ T6874] sch_fq: defrate 0 ignored. [ 101.333893][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'. [ 101.395993][ T6879] tipc: Started in network mode [ 101.400929][ T6879] tipc: Node identity b2ae96675c73, cluster identity 4711 [ 101.408162][ T6879] tipc: Enabled bearer , priority 0 [ 101.437379][ T6878] tipc: Disabling bearer [ 101.724394][ T6885] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1211'. [ 101.959788][ T6910] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 102.047805][ T6915] tipc: Enabled bearer , priority 0 [ 102.070141][ T6914] tipc: Disabling bearer [ 102.385112][ T6928] IPVS: stopping master sync thread 6929 ... [ 102.472657][ T6935] FAULT_INJECTION: forcing a failure. [ 102.472657][ T6935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.485844][ T6935] CPU: 0 UID: 0 PID: 6935 Comm: syz.0.1230 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.485933][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.485951][ T6935] Call Trace: [ 102.485960][ T6935] [ 102.485969][ T6935] __dump_stack+0x1d/0x30 [ 102.486002][ T6935] dump_stack_lvl+0x95/0xd0 [ 102.486031][ T6935] dump_stack+0x15/0x1b [ 102.486078][ T6935] should_fail_ex+0x265/0x280 [ 102.486108][ T6935] should_fail+0xb/0x20 [ 102.486134][ T6935] should_fail_usercopy+0x1a/0x20 [ 102.486229][ T6935] _copy_from_user+0x1c/0xb0 [ 102.486329][ T6935] __se_sys_mount+0x10d/0x2e0 [ 102.486355][ T6935] ? fput+0x8f/0xc0 [ 102.486385][ T6935] ? ksys_write+0x192/0x1a0 [ 102.486407][ T6935] __x64_sys_mount+0x67/0x80 [ 102.486491][ T6935] x64_sys_call+0x2cca/0x3000 [ 102.486516][ T6935] do_syscall_64+0xca/0x2b0 [ 102.486554][ T6935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.486582][ T6935] RIP: 0033:0x7f4b88aef749 [ 102.486653][ T6935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.486677][ T6935] RSP: 002b:00007f4b87557038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.486702][ T6935] RAX: ffffffffffffffda RBX: 00007f4b88d45fa0 RCX: 00007f4b88aef749 [ 102.486761][ T6935] RDX: 00002000000002c0 RSI: 0000200000000000 RDI: 0000000000000000 [ 102.486778][ T6935] RBP: 00007f4b87557090 R08: 00002000000007c0 R09: 0000000000000000 [ 102.486795][ T6935] R10: 0000000002010010 R11: 0000000000000246 R12: 0000000000000001 [ 102.486811][ T6935] R13: 00007f4b88d46038 R14: 00007f4b88d45fa0 R15: 00007fff52098798 [ 102.486836][ T6935] [ 102.776711][ T6911] serio: Serial port ttyS3 [ 102.872961][ T6953] sch_fq: defrate 0 ignored. [ 103.096205][ T6967] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1243'. [ 103.105286][ T6967] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1243'. [ 103.142342][ T6967] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 103.300824][ T6980] lo speed is unknown, defaulting to 1000 [ 103.336705][ T6901] syz.2.1217 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 103.347858][ T6901] CPU: 1 UID: 0 PID: 6901 Comm: syz.2.1217 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.347936][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.347949][ T6901] Call Trace: [ 103.347955][ T6901] [ 103.347963][ T6901] __dump_stack+0x1d/0x30 [ 103.348006][ T6901] dump_stack_lvl+0x95/0xd0 [ 103.348031][ T6901] dump_stack+0x15/0x1b [ 103.348060][ T6901] dump_header+0x81/0x240 [ 103.348088][ T6901] oom_kill_process+0x295/0x350 [ 103.348129][ T6901] out_of_memory+0x97b/0xb80 [ 103.348161][ T6901] try_charge_memcg+0x610/0xa10 [ 103.348337][ T6901] charge_memcg+0x51/0xc0 [ 103.348374][ T6901] __mem_cgroup_charge+0x28/0xb0 [ 103.348500][ T6901] filemap_add_folio+0x111/0x360 [ 103.348522][ T6901] __filemap_get_folio_mpol+0x326/0x650 [ 103.348549][ T6901] filemap_fault+0x44d/0xb70 [ 103.348588][ T6901] __do_fault+0xbc/0x200 [ 103.348605][ T6901] handle_mm_fault+0xfab/0x2c60 [ 103.348678][ T6901] do_user_addr_fault+0x630/0x1080 [ 103.348720][ T6901] exc_page_fault+0x62/0xa0 [ 103.348755][ T6901] asm_exc_page_fault+0x26/0x30 [ 103.348780][ T6901] RIP: 0033:0x7ff59bf36496 [ 103.348813][ T6901] Code: 1f 44 00 00 19 c0 83 c8 01 c3 31 c0 c3 0f 1f 80 00 00 00 00 48 0f 38 f0 07 48 0f 38 f0 0e 48 29 c8 75 e1 48 0f 38 f0 44 17 f8 <48> 0f 38 f0 4c 16 f8 48 29 c8 75 ce c3 c5 fa 6f 16 c5 e9 74 17 c5 [ 103.348904][ T6901] RSP: 002b:00007ffc91beba98 EFLAGS: 00010246 [ 103.348920][ T6901] RAX: 0c000b0000000400 RBX: 00007ff59ccf5720 RCX: 0a000c000b000000 [ 103.349008][ T6901] RDX: 000000000000000a RSI: 0000001b33c22336 RDI: 0000001b33c23fe6 [ 103.349021][ T6901] RBP: 0000001b33c22336 R08: 00000000003ffde8 R09: 0000000000001cb4 [ 103.349033][ T6901] R10: 0000001b33824218 R11: 000000000000000a R12: 0000000000001cc0 [ 103.349045][ T6901] R13: 000000000000001a R14: 0000001b33824220 R15: 0000001b33824218 [ 103.349068][ T6901] [ 103.349077][ T6901] memory: usage 307200kB, limit 307200kB, failcnt 4371 [ 103.537280][ T6901] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 103.545269][ T6901] kmem: usage 306684kB, limit 9007199254740988kB, failcnt 0 [ 103.552584][ T6901] Memory cgroup stats for /syz2: [ 103.553832][ T6901] cache 4096 [ 103.562065][ T6901] rss 0 [ 103.564898][ T6901] shmem 0 [ 103.567861][ T6901] mapped_file 0 [ 103.571379][ T6901] dirty 0 [ 103.574439][ T6901] writeback 0 [ 103.577744][ T6901] workingset_refault_anon 243 [ 103.582443][ T6901] workingset_refault_file 3572 [ 103.587314][ T6901] swap 274432 [ 103.590614][ T6901] swapcached 0 [ 103.594047][ T6901] pgpgin 65735 [ 103.597466][ T6901] pgpgout 65606 [ 103.600956][ T6901] pgfault 114365 [ 103.604639][ T6901] pgmajfault 210 [ 103.608208][ T6901] inactive_anon 45056 [ 103.612203][ T6901] active_anon 217088 [ 103.616205][ T6901] inactive_file 0 [ 103.619872][ T6901] active_file 4096 [ 103.623618][ T6901] unevictable 0 [ 103.627128][ T6901] hierarchical_memory_limit 314572800 [ 103.632615][ T6901] hierarchical_memsw_limit 9223372036854771712 [ 103.638994][ T6901] total_cache 4096 [ 103.642734][ T6901] total_rss 0 [ 103.646180][ T6901] total_shmem 0 [ 103.649665][ T6901] total_mapped_file 0 [ 103.653704][ T6901] total_dirty 0 [ 103.657187][ T6901] total_writeback 0 [ 103.661036][ T6901] total_workingset_refault_anon 243 [ 103.666358][ T6901] total_workingset_refault_file 3572 [ 103.671662][ T6901] total_swap 274432 [ 103.675515][ T6901] total_swapcached 0 [ 103.679428][ T6901] total_pgpgin 65735 [ 103.683335][ T6901] total_pgpgout 65606 [ 103.687363][ T6901] total_pgfault 114365 [ 103.691507][ T6901] total_pgmajfault 210 [ 103.695708][ T6901] total_inactive_anon 45056 [ 103.700269][ T6901] total_active_anon 217088 [ 103.704727][ T6901] total_inactive_file 0 [ 103.708905][ T6901] total_active_file 4096 [ 103.713230][ T6901] total_unevictable 0 [ 103.717325][ T6901] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1217,pid=6901,uid=0 [ 103.731986][ T6901] Memory cgroup out of memory: Killed process 6901 (syz.2.1217) total-vm:94100kB, anon-rss:1136kB, file-rss:22308kB, shmem-rss:128kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 103.819964][ T6987] lo speed is unknown, defaulting to 1000 [ 103.890506][ T6993] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 103.925969][ T6987] bond0 (unregistering): Released all slaves [ 103.926899][ T6992] IPVS: stopping master sync thread 6993 ... [ 103.993970][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 103.994031][ T29] audit: type=1326 audit(1767452938.996:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6969 comm="syz.1.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7efd3c4af749 code=0x7ffc0000 [ 104.046523][ T29] audit: type=1400 audit(1767452939.046:7663): avc: denied { setopt } for pid=6996 comm="syz.3.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.066039][ T29] audit: type=1400 audit(1767452939.046:7664): avc: denied { write } for pid=6996 comm="syz.3.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.096088][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'. [ 104.135085][ T29] audit: type=1400 audit(1767452939.076:7665): avc: denied { ioctl } for pid=6996 comm="syz.3.1253" path="socket:[22110]" dev="sockfs" ino=22110 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.160141][ T29] audit: type=1400 audit(1767452939.076:7666): avc: denied { bind } for pid=6996 comm="syz.3.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.456710][ T29] audit: type=1400 audit(1767452939.456:7667): avc: denied { create } for pid=7018 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.481783][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 104.491516][ T29] audit: type=1400 audit(1767452939.476:7668): avc: denied { create } for pid=7018 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.511215][ T29] audit: type=1400 audit(1767452939.476:7669): avc: denied { create } for pid=7018 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.530908][ T29] audit: type=1400 audit(1767452939.476:7670): avc: denied { setopt } for pid=7018 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.550358][ T29] audit: type=1400 audit(1767452939.476:7671): avc: denied { write } for pid=7018 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.649233][ T7024] lo speed is unknown, defaulting to 1000 [ 104.655921][ T7024] lo speed is unknown, defaulting to 1000 [ 104.661823][ T7024] lo speed is unknown, defaulting to 1000 [ 104.696187][ T7024] infiniband sz1: set active [ 104.700925][ T7024] infiniband sz1: added lo [ 104.705553][ T3508] lo speed is unknown, defaulting to 1000 [ 104.721472][ T7024] RDS/IB: sz1: added [ 104.726258][ T7024] smc: adding ib device sz1 with port count 1 [ 104.732577][ T7024] smc: ib device sz1 port 1 has no pnetid [ 104.738911][ T6418] lo speed is unknown, defaulting to 1000 [ 104.744729][ T7024] lo speed is unknown, defaulting to 1000 [ 104.779596][ T7024] lo speed is unknown, defaulting to 1000 [ 104.816410][ T7024] lo speed is unknown, defaulting to 1000 [ 104.850978][ T7024] lo speed is unknown, defaulting to 1000 [ 104.888936][ T7024] lo speed is unknown, defaulting to 1000 [ 105.152348][ T7039] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.362172][ T7044] lo speed is unknown, defaulting to 1000 [ 105.399464][ T7044] lo speed is unknown, defaulting to 1000 [ 105.468939][ T7044] bond0 (unregistering): Released all slaves [ 105.586030][ T7062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7062 comm=syz.0.1274 [ 105.650285][ T7034] serio: Serial port ttyS3 [ 105.831332][ T7060] serio: Serial port ttyS3 [ 106.377860][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 106.618766][ T7104] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1290'. [ 106.690670][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 106.734090][ T7111] sch_fq: defrate 0 ignored. [ 106.755858][ T7113] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.856288][ T7113] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.905190][ T7120] tipc: Started in network mode [ 106.910213][ T7120] tipc: Node identity 065d55bce767, cluster identity 4711 [ 106.917527][ T7120] tipc: Enabled bearer , priority 0 [ 106.926524][ T7113] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.945321][ T7123] xt_policy: output policy not valid in PREROUTING and INPUT [ 106.995630][ T7113] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.021282][ T7132] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 107.021575][ T7129] IPVS: stopping master sync thread 7132 ... [ 107.061439][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.084739][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.101171][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.119305][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1301'. [ 107.135263][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.277698][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 107.314178][ T7144] ip6gre1: entered allmulticast mode [ 107.420582][ T7106] serio: Serial port ttyS3 [ 107.446893][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 107.529497][ T7165] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.631148][ T7165] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.664137][ T7118] SET target dimension over the limit! [ 107.685929][ T7165] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.745633][ T7165] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.835502][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.856888][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.891366][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.915280][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.953118][ T7196] lo speed is unknown, defaulting to 1000 [ 107.959899][ T7188] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 107.966626][ T7188] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 107.974953][ T7188] vhci_hcd vhci_hcd.0: Device attached [ 108.003184][ T7193] vhci_hcd: connection closed [ 108.003436][ T12] vhci_hcd vhci_hcd.0: stop threads [ 108.013610][ T12] vhci_hcd vhci_hcd.0: release socket [ 108.019061][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 108.043717][ T3583] tipc: Node number set to 3778696636 [ 108.087776][ T7196] lo speed is unknown, defaulting to 1000 [ 108.154880][ T7205] tipc: Enabled bearer , priority 0 [ 108.189024][ T7204] tipc: Disabling bearer [ 108.536791][ T7213] serio: Serial port ttyS3 [ 108.765723][ T7221] lo speed is unknown, defaulting to 1000 [ 108.813312][ T7221] lo speed is unknown, defaulting to 1000 [ 108.866811][ T7224] siw: device registration error -23 [ 109.233938][ T7216] serio: Serial port ttyS3 [ 109.345228][ T7233] __nla_validate_parse: 5 callbacks suppressed [ 109.345248][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 109.380919][ T29] kauditd_printk_skb: 827 callbacks suppressed [ 109.380935][ T29] audit: type=1326 audit(1767452944.376:8499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 109.422983][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1340'. [ 109.439508][ T29] audit: type=1326 audit(1767452944.416:8500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 109.463104][ T29] audit: type=1326 audit(1767452944.416:8501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 109.486700][ T29] audit: type=1326 audit(1767452944.416:8502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 109.510756][ T29] audit: type=1326 audit(1767452944.416:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 109.534298][ T29] audit: type=1326 audit(1767452944.416:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 109.557860][ T29] audit: type=1326 audit(1767452944.416:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 109.581382][ T29] audit: type=1326 audit(1767452944.416:8506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7232 comm="syz.2.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 109.605203][ T29] audit: type=1400 audit(1767452944.416:8508): avc: denied { setopt } for pid=7236 comm="syz.5.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.624749][ T29] audit: type=1400 audit(1767452944.416:8509): avc: denied { write } for pid=7236 comm="syz.5.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.685583][ T7242] tipc: Enabled bearer , priority 0 [ 109.692477][ T7241] sch_fq: defrate 0 ignored. [ 109.722286][ T7239] tipc: Disabling bearer [ 109.737194][ T7254] SET target dimension over the limit! [ 109.758525][ T7254] xt_policy: output policy not valid in PREROUTING and INPUT [ 109.810623][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1347'. [ 109.898535][ T7262] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1349'. [ 110.050966][ T7278] lo speed is unknown, defaulting to 1000 [ 110.093113][ T7275] lo speed is unknown, defaulting to 1000 [ 110.129840][ T7278] lo speed is unknown, defaulting to 1000 [ 110.177241][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 110.196864][ T7275] lo speed is unknown, defaulting to 1000 [ 110.532276][ T7307] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.566487][ T7307] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.580212][ T7310] lo speed is unknown, defaulting to 1000 [ 110.615773][ T7307] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.627075][ T7310] lo speed is unknown, defaulting to 1000 [ 110.676871][ T7307] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.736721][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.749328][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.765884][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.789081][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.940800][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'. [ 111.064570][ T7340] lo speed is unknown, defaulting to 1000 [ 111.141929][ T7337] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.174241][ T7340] lo speed is unknown, defaulting to 1000 [ 111.256346][ T7337] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.316018][ T7337] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.356991][ T7354] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.380269][ T7337] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.394300][ T7354] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.408584][ T7357] siw: device registration error -23 [ 111.421020][ T7355] lo speed is unknown, defaulting to 1000 [ 111.437317][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.447809][ T7354] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.462632][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.476540][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.492425][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.501793][ T7354] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.516811][ T7355] lo speed is unknown, defaulting to 1000 [ 112.143618][ T7369] serio: Serial port ttyS3 [ 112.376367][ T7374] macvtap0: refused to change device tx_queue_len [ 112.456275][ T7377] xt_policy: output policy not valid in PREROUTING and INPUT [ 112.549859][ T7362] syz.0.1389 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 112.560961][ T7362] CPU: 0 UID: 0 PID: 7362 Comm: syz.0.1389 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.561072][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.561086][ T7362] Call Trace: [ 112.561093][ T7362] [ 112.561102][ T7362] __dump_stack+0x1d/0x30 [ 112.561158][ T7362] dump_stack_lvl+0x95/0xd0 [ 112.561186][ T7362] dump_stack+0x15/0x1b [ 112.561211][ T7362] dump_header+0x81/0x240 [ 112.561279][ T7362] oom_kill_process+0x295/0x350 [ 112.561308][ T7362] out_of_memory+0x97b/0xb80 [ 112.561374][ T7362] try_charge_memcg+0x610/0xa10 [ 112.561416][ T7362] charge_memcg+0x51/0xc0 [ 112.561454][ T7362] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 112.561493][ T7362] __read_swap_cache_async+0x17b/0x2d0 [ 112.561549][ T7362] swap_cluster_readahead+0x262/0x3c0 [ 112.561584][ T7362] swapin_readahead+0xde/0x820 [ 112.561662][ T7362] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 112.561692][ T7362] ? __rcu_read_unlock+0x34/0x70 [ 112.561712][ T7362] ? __rcu_read_unlock+0x4f/0x70 [ 112.561730][ T7362] ? swap_cache_get_folio+0x277/0x280 [ 112.561822][ T7362] do_swap_page+0x2b4/0x21e0 [ 112.561888][ T7362] ? __pfx_default_wake_function+0x10/0x10 [ 112.561928][ T7362] handle_mm_fault+0x9d8/0x2c60 [ 112.561981][ T7362] do_user_addr_fault+0x630/0x1080 [ 112.562059][ T7362] exc_page_fault+0x62/0xa0 [ 112.562199][ T7362] asm_exc_page_fault+0x26/0x30 [ 112.562223][ T7362] RIP: 0033:0x7f4b889c59ec [ 112.562242][ T7362] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 112.562318][ T7362] RSP: 002b:00007fff52098900 EFLAGS: 00010287 [ 112.562339][ T7362] RAX: 0000000000000000 RBX: 00007f4b88d46090 RCX: 0000000000000000 [ 112.562406][ T7362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555566837808 [ 112.562419][ T7362] RBP: 00007f4b88d47da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 112.562483][ T7362] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001b7b0 [ 112.562496][ T7362] R13: 00007f4b88d46090 R14: ffffffffffffffff R15: 00007fff52098a10 [ 112.562520][ T7362] [ 112.562528][ T7362] memory: usage 307200kB, limit 307200kB, failcnt 2493 [ 112.778582][ T7362] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 112.786558][ T7362] kmem: usage 306680kB, limit 9007199254740988kB, failcnt 0 [ 112.793892][ T7362] Memory cgroup stats for /syz0: [ 112.794530][ T7362] cache 4096 [ 112.802767][ T7362] rss 0 [ 112.805594][ T7362] shmem 0 [ 112.808555][ T7362] mapped_file 0 [ 112.812046][ T7362] dirty 0 [ 112.815125][ T7362] writeback 0 [ 112.818937][ T7362] workingset_refault_anon 402 [ 112.823886][ T7362] workingset_refault_file 2890 [ 112.828688][ T7362] swap 376832 [ 112.832005][ T7362] swapcached 4096 [ 112.835683][ T7362] pgpgin 92570 [ 112.839074][ T7362] pgpgout 92440 [ 112.842604][ T7362] pgfault 118476 [ 112.846268][ T7362] pgmajfault 298 [ 112.849953][ T7362] inactive_anon 528384 [ 112.854174][ T7362] active_anon 0 [ 112.857657][ T7362] inactive_file 4096 [ 112.861581][ T7362] active_file 0 [ 112.865261][ T7362] unevictable 0 [ 112.869042][ T7362] hierarchical_memory_limit 314572800 [ 112.874538][ T7362] hierarchical_memsw_limit 9223372036854771712 [ 112.880713][ T7362] total_cache 4096 [ 112.884541][ T7362] total_rss 0 [ 112.887876][ T7362] total_shmem 0 [ 112.891353][ T7362] total_mapped_file 0 [ 112.895578][ T7362] total_dirty 0 [ 112.899057][ T7362] total_writeback 0 [ 112.902953][ T7362] total_workingset_refault_anon 402 [ 112.908217][ T7362] total_workingset_refault_file 2890 [ 112.913536][ T7362] total_swap 376832 [ 112.917476][ T7362] total_swapcached 4096 [ 112.921644][ T7362] total_pgpgin 92570 [ 112.925611][ T7362] total_pgpgout 92440 [ 112.929618][ T7362] total_pgfault 118476 [ 112.933721][ T7362] total_pgmajfault 298 [ 112.937873][ T7362] total_inactive_anon 528384 [ 112.942474][ T7362] total_active_anon 0 [ 112.946522][ T7362] total_inactive_file 4096 [ 112.951032][ T7362] total_active_file 0 [ 112.955138][ T7362] total_unevictable 0 [ 112.959243][ T7362] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1389,pid=7362,uid=0 [ 112.974195][ T7362] Memory cgroup out of memory: Killed process 7362 (syz.0.1389) total-vm:96148kB, anon-rss:1284kB, file-rss:22360kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 113.052399][ T7386] lo speed is unknown, defaulting to 1000 [ 113.110227][ T7386] lo speed is unknown, defaulting to 1000 [ 113.172824][ T7388] siw: device registration error -23 [ 113.195412][ T7376] SET target dimension over the limit! [ 113.470901][ T7410] tipc: Enabling of bearer rejected, already enabled [ 113.797128][ T7419] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.830549][ T7416] tipc: Enabling of bearer rejected, failed to enable media [ 114.060577][ T7432] FAULT_INJECTION: forcing a failure. [ 114.060577][ T7432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.073743][ T7432] CPU: 1 UID: 0 PID: 7432 Comm: syz.2.1414 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.073777][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.073898][ T7432] Call Trace: [ 114.073906][ T7432] [ 114.073917][ T7432] __dump_stack+0x1d/0x30 [ 114.073947][ T7432] dump_stack_lvl+0x95/0xd0 [ 114.074029][ T7432] dump_stack+0x15/0x1b [ 114.074048][ T7432] should_fail_ex+0x265/0x280 [ 114.074075][ T7432] should_fail+0xb/0x20 [ 114.074099][ T7432] should_fail_usercopy+0x1a/0x20 [ 114.074139][ T7432] _copy_to_iter+0x387/0xe70 [ 114.074172][ T7432] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 114.074203][ T7432] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 114.074298][ T7432] __skb_datagram_iter+0xc6/0x690 [ 114.074331][ T7432] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 114.074368][ T7432] skb_copy_datagram_iter+0x3d/0x110 [ 114.074405][ T7432] netlink_recvmsg+0x1a8/0x550 [ 114.074514][ T7432] ? __pfx_netlink_recvmsg+0x10/0x10 [ 114.074554][ T7432] sock_recvmsg+0x139/0x170 [ 114.074610][ T7432] ____sys_recvmsg+0xf5/0x280 [ 114.074646][ T7432] ___sys_recvmsg+0x11f/0x370 [ 114.074705][ T7432] do_recvmmsg+0x1ef/0x540 [ 114.074746][ T7432] ? get_timespec64+0xc9/0x100 [ 114.074786][ T7432] __x64_sys_recvmmsg+0xfb/0x170 [ 114.074821][ T7432] x64_sys_call+0x2b75/0x3000 [ 114.074864][ T7432] do_syscall_64+0xca/0x2b0 [ 114.074912][ T7432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.074933][ T7432] RIP: 0033:0x7ff59bf6f749 [ 114.074948][ T7432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.074970][ T7432] RSP: 002b:00007ff59a9cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 114.074994][ T7432] RAX: ffffffffffffffda RBX: 00007ff59c1c5fa0 RCX: 00007ff59bf6f749 [ 114.075031][ T7432] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 114.075050][ T7432] RBP: 00007ff59a9cf090 R08: 0000200000003700 R09: 0000000000000000 [ 114.075065][ T7432] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 114.075146][ T7432] R13: 00007ff59c1c6038 R14: 00007ff59c1c5fa0 R15: 00007ffc91beba58 [ 114.075240][ T7432] [ 114.384352][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 114.384381][ T29] audit: type=1400 audit(1767452949.386:8769): avc: denied { unmount } for pid=7438 comm="syz.2.1417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.421329][ T7441] macvtap0: refused to change device tx_queue_len [ 114.429353][ T29] audit: type=1400 audit(1767452949.436:8770): avc: denied { write } for pid=7440 comm="syz.2.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 114.464371][ T29] audit: type=1400 audit(1767452949.466:8771): avc: denied { setopt } for pid=7442 comm="syz.2.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.501369][ T29] audit: type=1400 audit(1767452949.496:8772): avc: denied { write } for pid=7444 comm="syz.2.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 114.704303][ T583] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.723182][ T583] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.738330][ T583] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.755300][ T583] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.780702][ T7456] tipc: Enabling of bearer rejected, already enabled [ 114.814524][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 114.829552][ T3415] lo speed is unknown, defaulting to 1000 [ 114.836683][ T29] audit: type=1326 audit(1767452949.836:8773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 114.861858][ T29] audit: type=1326 audit(1767452949.836:8774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 114.885441][ T29] audit: type=1326 audit(1767452949.836:8775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 114.908919][ T29] audit: type=1326 audit(1767452949.836:8776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 114.932465][ T29] audit: type=1326 audit(1767452949.836:8777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 114.956129][ T29] audit: type=1326 audit(1767452949.836:8779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.3.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 114.987295][ T7469] macvtap0: refused to change device tx_queue_len [ 115.005058][ T7471] SET target dimension over the limit! [ 115.012444][ T7471] xt_policy: output policy not valid in PREROUTING and INPUT [ 115.346473][ T7489] lo speed is unknown, defaulting to 1000 [ 115.380666][ T7489] lo speed is unknown, defaulting to 1000 [ 115.655996][ T7493] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1438'. [ 115.719710][ T7498] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 115.730877][ T7497] IPVS: stopping master sync thread 7498 ... [ 116.258620][ T7522] tipc: Enabled bearer , priority 0 [ 116.287743][ T7518] tipc: Resetting bearer [ 116.309963][ T7510] serio: Serial port ttyS3 [ 116.328867][ T7518] tipc: Disabling bearer [ 116.405275][ T7499] serio: Serial port ttyS3 [ 116.416288][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'. [ 116.425326][ T7529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1452'. [ 116.435640][ T7529] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1452'. [ 116.670502][ T7538] xt_policy: output policy not valid in PREROUTING and INPUT [ 116.708926][ T7537] Cannot find add_set index 0 as target [ 116.788843][ T7546] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1458'. [ 116.954139][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1467'. [ 116.989042][ T7572] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.999471][ T7570] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 117.232447][ T7595] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1479'. [ 117.242660][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1479'. [ 117.252155][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1479'. [ 117.790260][ T7636] FAULT_INJECTION: forcing a failure. [ 117.790260][ T7636] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 117.803585][ T7636] CPU: 0 UID: 0 PID: 7636 Comm: syz.2.1492 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.803666][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.803684][ T7636] Call Trace: [ 117.803693][ T7636] [ 117.803703][ T7636] __dump_stack+0x1d/0x30 [ 117.803734][ T7636] dump_stack_lvl+0x95/0xd0 [ 117.803820][ T7636] dump_stack+0x15/0x1b [ 117.803878][ T7636] should_fail_ex+0x265/0x280 [ 117.803909][ T7636] should_fail_alloc_page+0xf2/0x100 [ 117.803937][ T7636] __alloc_frozen_pages_noprof+0x109/0x360 [ 117.803978][ T7636] alloc_pages_mpol+0xb3/0x260 [ 117.804014][ T7636] ? css_rstat_updated+0xbb/0x280 [ 117.804120][ T7636] vma_alloc_folio_noprof+0x1aa/0x300 [ 117.804162][ T7636] handle_mm_fault+0xef5/0x2c60 [ 117.804206][ T7636] ? _raw_spin_lock+0x52/0xa0 [ 117.804227][ T7636] ? __pte_offset_map_lock+0x1d9/0x240 [ 117.804388][ T7636] __get_user_pages+0x1024/0x1ed0 [ 117.804433][ T7636] __mm_populate+0x243/0x3a0 [ 117.804474][ T7636] do_mlock+0x471/0x520 [ 117.804550][ T7636] ? __secure_computing+0x82/0x150 [ 117.804581][ T7636] __x64_sys_mlock+0x36/0x50 [ 117.804611][ T7636] x64_sys_call+0x1794/0x3000 [ 117.804653][ T7636] do_syscall_64+0xca/0x2b0 [ 117.804694][ T7636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.804781][ T7636] RIP: 0033:0x7ff59bf6f749 [ 117.804801][ T7636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.804875][ T7636] RSP: 002b:00007ff59a9cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 117.804899][ T7636] RAX: ffffffffffffffda RBX: 00007ff59c1c5fa0 RCX: 00007ff59bf6f749 [ 117.804915][ T7636] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 117.804930][ T7636] RBP: 00007ff59a9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 117.804947][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.804962][ T7636] R13: 00007ff59c1c6038 R14: 00007ff59c1c5fa0 R15: 00007ffc91beba58 [ 117.804985][ T7636] [ 118.442421][ T7662] lo speed is unknown, defaulting to 1000 [ 118.484858][ T7662] lo speed is unknown, defaulting to 1000 [ 118.736455][ T7681] siw: device registration error -23 [ 118.741057][ T7677] lo speed is unknown, defaulting to 1000 [ 118.796802][ T7677] lo speed is unknown, defaulting to 1000 [ 119.212465][ T7692] 9p: Bad value for 'wfdno' [ 119.232398][ T7694] tipc: Enabling of bearer rejected, already enabled [ 119.447296][ T7702] tipc: Enabled bearer , priority 0 [ 119.454708][ T7701] tipc: Resetting bearer [ 119.475220][ T7701] tipc: Disabling bearer [ 119.608841][ T7709] FAULT_INJECTION: forcing a failure. [ 119.608841][ T7709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.622052][ T7709] CPU: 1 UID: 0 PID: 7709 Comm: syz.3.1521 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.622078][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.622098][ T7709] Call Trace: [ 119.622107][ T7709] [ 119.622115][ T7709] __dump_stack+0x1d/0x30 [ 119.622263][ T7709] dump_stack_lvl+0x95/0xd0 [ 119.622283][ T7709] dump_stack+0x15/0x1b [ 119.622300][ T7709] should_fail_ex+0x265/0x280 [ 119.622321][ T7709] should_fail+0xb/0x20 [ 119.622339][ T7709] should_fail_usercopy+0x1a/0x20 [ 119.622420][ T7709] _copy_from_user+0x1c/0xb0 [ 119.622459][ T7709] kvmemdup_bpfptr_noprof+0x86/0xf0 [ 119.622484][ T7709] map_update_elem+0x372/0x440 [ 119.622621][ T7709] __sys_bpf+0x57b/0x7c0 [ 119.622712][ T7709] __x64_sys_bpf+0x41/0x50 [ 119.622749][ T7709] x64_sys_call+0x28e1/0x3000 [ 119.622770][ T7709] do_syscall_64+0xca/0x2b0 [ 119.622870][ T7709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.622889][ T7709] RIP: 0033:0x7f0bd829f749 [ 119.622902][ T7709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.622918][ T7709] RSP: 002b:00007f0bd6cff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.622935][ T7709] RAX: ffffffffffffffda RBX: 00007f0bd84f5fa0 RCX: 00007f0bd829f749 [ 119.622967][ T7709] RDX: 0000000000000020 RSI: 00002000000008c0 RDI: 0000000000000002 [ 119.622978][ T7709] RBP: 00007f0bd6cff090 R08: 0000000000000000 R09: 0000000000000000 [ 119.622989][ T7709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.622999][ T7709] R13: 00007f0bd84f6038 R14: 00007f0bd84f5fa0 R15: 00007ffc5147c638 [ 119.623027][ T7709] [ 119.856386][ T29] kauditd_printk_skb: 683 callbacks suppressed [ 119.856403][ T29] audit: type=1326 audit(1767452954.856:9462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 119.886706][ T29] audit: type=1326 audit(1767452954.856:9463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 119.910188][ T29] audit: type=1326 audit(1767452954.856:9464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 119.933693][ T29] audit: type=1326 audit(1767452954.856:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 119.957595][ T29] audit: type=1326 audit(1767452954.856:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 119.981144][ T29] audit: type=1326 audit(1767452954.856:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 120.004661][ T29] audit: type=1326 audit(1767452954.856:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 120.028323][ T29] audit: type=1326 audit(1767452954.856:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 120.051782][ T29] audit: type=1326 audit(1767452954.856:9470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 120.075237][ T29] audit: type=1326 audit(1767452954.856:9471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.3.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 120.236329][ T7732] __nla_validate_parse: 19 callbacks suppressed [ 120.236345][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 120.509216][ T7742] veth0_to_team: entered promiscuous mode [ 120.541081][ T7741] lo speed is unknown, defaulting to 1000 [ 120.687974][ T7741] lo speed is unknown, defaulting to 1000 [ 120.754666][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 120.913302][ T7754] SELinux: Context system_u:object is not valid (left unmapped). [ 120.923274][ T7754] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1539'. [ 121.094295][ T7766] sch_fq: defrate 0 ignored. [ 121.127506][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1546'. [ 121.359265][ T7793] FAULT_INJECTION: forcing a failure. [ 121.359265][ T7793] name failslab, interval 1, probability 0, space 0, times 0 [ 121.371979][ T7793] CPU: 0 UID: 0 PID: 7793 Comm: syz.2.1553 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.372049][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.372067][ T7793] Call Trace: [ 121.372075][ T7793] [ 121.372083][ T7793] __dump_stack+0x1d/0x30 [ 121.372188][ T7793] dump_stack_lvl+0x95/0xd0 [ 121.372214][ T7793] dump_stack+0x15/0x1b [ 121.372238][ T7793] should_fail_ex+0x265/0x280 [ 121.372267][ T7793] should_failslab+0x8c/0xb0 [ 121.372362][ T7793] kmem_cache_alloc_noprof+0x69/0x4b0 [ 121.372386][ T7793] ? skb_clone+0x151/0x1f0 [ 121.372416][ T7793] skb_clone+0x151/0x1f0 [ 121.372517][ T7793] __netlink_deliver_tap+0x2c9/0x500 [ 121.372552][ T7793] netlink_unicast+0x66b/0x690 [ 121.372588][ T7793] netlink_sendmsg+0x58b/0x6b0 [ 121.372678][ T7793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.372714][ T7793] __sock_sendmsg+0x145/0x180 [ 121.372733][ T7793] ____sys_sendmsg+0x31e/0x4a0 [ 121.372789][ T7793] ___sys_sendmsg+0x17b/0x1d0 [ 121.372850][ T7793] __x64_sys_sendmsg+0xd4/0x160 [ 121.372890][ T7793] x64_sys_call+0x17ba/0x3000 [ 121.372959][ T7793] do_syscall_64+0xca/0x2b0 [ 121.373000][ T7793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.373027][ T7793] RIP: 0033:0x7ff59bf6f749 [ 121.373046][ T7793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.373119][ T7793] RSP: 002b:00007ff59a9cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.373139][ T7793] RAX: ffffffffffffffda RBX: 00007ff59c1c5fa0 RCX: 00007ff59bf6f749 [ 121.373151][ T7793] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000006 [ 121.373168][ T7793] RBP: 00007ff59a9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 121.373184][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.373200][ T7793] R13: 00007ff59c1c6038 R14: 00007ff59c1c5fa0 R15: 00007ffc91beba58 [ 121.373223][ T7793] [ 121.424117][ T7786] lo speed is unknown, defaulting to 1000 [ 121.441593][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1553'. [ 121.622181][ T7786] lo speed is unknown, defaulting to 1000 [ 121.658860][ T7795] siw: device registration error -23 [ 122.245594][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1562'. [ 122.255380][ T7818] serio: Serial port ttyS3 [ 122.288180][ T7833] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 122.291303][ T7832] IPVS: stopping master sync thread 7833 ... [ 122.570127][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1566'. [ 122.579165][ T7840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1566'. [ 122.617505][ T7840] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1566'. [ 122.627942][ T7817] serio: Serial port ttyS3 [ 122.676949][ T7850] FAULT_INJECTION: forcing a failure. [ 122.676949][ T7850] name failslab, interval 1, probability 0, space 0, times 0 [ 122.689886][ T7850] CPU: 0 UID: 0 PID: 7850 Comm: syz.0.1570 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.689977][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.689993][ T7850] Call Trace: [ 122.690002][ T7850] [ 122.690011][ T7850] __dump_stack+0x1d/0x30 [ 122.690066][ T7850] dump_stack_lvl+0x95/0xd0 [ 122.690121][ T7850] dump_stack+0x15/0x1b [ 122.690147][ T7850] should_fail_ex+0x265/0x280 [ 122.690176][ T7850] should_failslab+0x8c/0xb0 [ 122.690254][ T7850] __kmalloc_cache_noprof+0x65/0x4c0 [ 122.690284][ T7850] ? x509_cert_parse+0x69/0x430 [ 122.690347][ T7850] x509_cert_parse+0x69/0x430 [ 122.690383][ T7850] x509_key_preparse+0x3c/0x420 [ 122.690414][ T7850] ? selinux_key_permission+0x161/0x190 [ 122.690514][ T7850] asymmetric_key_preparse+0x68/0xb0 [ 122.690547][ T7850] __key_create_or_update+0x28b/0x750 [ 122.690578][ T7850] ? key_validate+0xad/0xd0 [ 122.690610][ T7850] key_create_or_update+0x42/0x60 [ 122.690735][ T7850] __se_sys_add_key+0x29b/0x350 [ 122.690774][ T7850] __x64_sys_add_key+0x67/0x80 [ 122.690804][ T7850] x64_sys_call+0x2ea3/0x3000 [ 122.690884][ T7850] do_syscall_64+0xca/0x2b0 [ 122.690998][ T7850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.691026][ T7850] RIP: 0033:0x7f4b88aef749 [ 122.691044][ T7850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.691067][ T7850] RSP: 002b:00007f4b87557038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 122.691091][ T7850] RAX: ffffffffffffffda RBX: 00007f4b88d45fa0 RCX: 00007f4b88aef749 [ 122.691195][ T7850] RDX: 0000200000000940 RSI: 0000000000000000 RDI: 00002000000008c0 [ 122.691251][ T7850] RBP: 00007f4b87557090 R08: 0000000015b81131 R09: 0000000000000000 [ 122.691300][ T7850] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 122.691331][ T7850] R13: 00007f4b88d46038 R14: 00007f4b88d45fa0 R15: 00007fff52098798 [ 122.692013][ T7850] [ 122.911501][ T7848] tipc: Enabled bearer , priority 0 [ 122.975157][ T7843] tipc: Resetting bearer [ 123.006407][ T7843] tipc: Disabling bearer [ 123.161437][ T7868] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.217637][ T7871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1578'. [ 123.330837][ T7873] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.726697][ T7873] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.751049][ T7885] sch_fq: defrate 0 ignored. [ 123.777780][ T7873] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.806644][ T7887] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1583' sets config #7 [ 123.836933][ T7873] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.890280][ T7893] tipc: Enabled bearer , priority 0 [ 123.899410][ T7892] tipc: Resetting bearer [ 123.921219][ T7892] tipc: Disabling bearer [ 123.934880][ T53] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.947601][ T583] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.970619][ T583] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.983691][ T583] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.028451][ T7905] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 124.208228][ T7916] lo speed is unknown, defaulting to 1000 [ 124.214710][ T7915] lo speed is unknown, defaulting to 1000 [ 124.257300][ T7916] lo speed is unknown, defaulting to 1000 [ 124.348538][ T7915] lo speed is unknown, defaulting to 1000 [ 124.394321][ T7921] siw: device registration error -23 [ 124.905473][ T7944] SET target dimension over the limit! [ 124.913415][ T7944] xt_policy: output policy not valid in PREROUTING and INPUT [ 124.932448][ T7946] Cannot find add_set index 0 as target [ 124.941708][ T7946] xt_policy: output policy not valid in PREROUTING and INPUT [ 124.950007][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 124.950040][ T29] audit: type=1326 audit(1767452959.946:9784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.3.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 124.992840][ T29] audit: type=1326 audit(1767452959.986:9785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.3.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 125.016510][ T29] audit: type=1326 audit(1767452959.986:9786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.3.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 125.040118][ T29] audit: type=1326 audit(1767452959.986:9787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.3.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 125.063575][ T29] audit: type=1326 audit(1767452959.986:9788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.3.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 125.087082][ T29] audit: type=1326 audit(1767452959.986:9789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.3.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 125.110704][ T29] audit: type=1326 audit(1767452959.986:9790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.3.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 125.114715][ T7950] FAULT_INJECTION: forcing a failure. [ 125.114715][ T7950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.134131][ T29] audit: type=1326 audit(1767452959.986:9791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.3.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 125.147250][ T7950] CPU: 0 UID: 0 PID: 7950 Comm: syz.0.1608 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.147401][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.147473][ T7950] Call Trace: [ 125.147502][ T7950] [ 125.147532][ T7950] __dump_stack+0x1d/0x30 [ 125.147607][ T7950] dump_stack_lvl+0x95/0xd0 [ 125.147698][ T7950] dump_stack+0x15/0x1b [ 125.147762][ T7950] should_fail_ex+0x265/0x280 [ 125.147841][ T7950] should_fail+0xb/0x20 [ 125.147965][ T7950] should_fail_usercopy+0x1a/0x20 [ 125.148043][ T7950] strncpy_from_user+0x27/0x260 [ 125.148148][ T7950] ? selinux_file_open+0x2dc/0x330 [ 125.148266][ T7950] strncpy_from_user_nofault+0x68/0xf0 [ 125.148382][ T7950] bpf_probe_read_compat_str+0xb4/0x130 [ 125.148467][ T7950] bpf_prog_a259ef856bcc7fdb+0x46/0x4c [ 125.148557][ T7950] bpf_trace_run3+0x10f/0x1e0 [ 125.148721][ T7950] ? should_fail_ex+0xdb/0x280 [ 125.148840][ T7950] ? __slab_alloc+0x25/0x50 [ 125.148941][ T7950] __bpf_trace_locks_get_lock_context+0x2a/0x40 [ 125.149015][ T7950] locks_get_lock_context+0x1c1/0x210 [ 125.149224][ T7950] posix_lock_inode+0x67/0x2380 [ 125.149287][ T7950] ? file_has_perm+0x359/0x3a0 [ 125.149406][ T7950] fcntl_setlk+0x61f/0x950 [ 125.149518][ T7950] do_fcntl+0x6a1/0xf60 [ 125.149622][ T7950] __se_sys_fcntl+0xb1/0x120 [ 125.149737][ T7950] __x64_sys_fcntl+0x43/0x50 [ 125.149824][ T7950] x64_sys_call+0x2d6f/0x3000 [ 125.149930][ T7950] do_syscall_64+0xca/0x2b0 [ 125.150043][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.150117][ T7950] RIP: 0033:0x7f4b88aef749 [ 125.150184][ T7950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.150266][ T7950] RSP: 002b:00007f4b87557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 125.150405][ T7950] RAX: ffffffffffffffda RBX: 00007f4b88d45fa0 RCX: 00007f4b88aef749 [ 125.150449][ T7950] RDX: 0000200000000000 RSI: 0000000000000026 RDI: 0000000000000006 [ 125.150502][ T7950] RBP: 00007f4b87557090 R08: 0000000000000000 R09: 0000000000000000 [ 125.150544][ T7950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.150641][ T7950] R13: 00007f4b88d46038 R14: 00007f4b88d45fa0 R15: 00007fff52098798 [ 125.150703][ T7950] [ 125.395476][ T29] audit: type=1326 audit(1767452959.986:9792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.3.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 125.419053][ T29] audit: type=1326 audit(1767452959.986:9793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.3.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd829f749 code=0x7ffc0000 [ 125.602276][ T7968] lo speed is unknown, defaulting to 1000 [ 125.668252][ T7968] lo speed is unknown, defaulting to 1000 [ 126.148088][ T7987] __nla_validate_parse: 3 callbacks suppressed [ 126.148108][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1620'. [ 126.504856][ T8006] FAULT_INJECTION: forcing a failure. [ 126.504856][ T8006] name failslab, interval 1, probability 0, space 0, times 0 [ 126.517858][ T8006] CPU: 1 UID: 0 PID: 8006 Comm: syz.1.1626 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.517892][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.517910][ T8006] Call Trace: [ 126.517919][ T8006] [ 126.517985][ T8006] __dump_stack+0x1d/0x30 [ 126.518017][ T8006] dump_stack_lvl+0x95/0xd0 [ 126.518045][ T8006] dump_stack+0x15/0x1b [ 126.518072][ T8006] should_fail_ex+0x265/0x280 [ 126.518132][ T8006] ? __pfx_cond_bools_destroy+0x10/0x10 [ 126.518161][ T8006] should_failslab+0x8c/0xb0 [ 126.518186][ T8006] kmem_cache_alloc_noprof+0x69/0x4b0 [ 126.518214][ T8006] ? hashtab_duplicate+0xfe/0x360 [ 126.518287][ T8006] ? __pfx_cond_bools_destroy+0x10/0x10 [ 126.518310][ T8006] hashtab_duplicate+0xfe/0x360 [ 126.518373][ T8006] ? __pfx_cond_bools_copy+0x10/0x10 [ 126.518401][ T8006] cond_policydb_dup+0xd2/0x4e0 [ 126.518441][ T8006] security_set_bools+0xa0/0x340 [ 126.518558][ T8006] sel_commit_bools_write+0x1ea/0x270 [ 126.518655][ T8006] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 126.518676][ T8006] vfs_write+0x269/0x960 [ 126.518717][ T8006] ? __rcu_read_unlock+0x4f/0x70 [ 126.518744][ T8006] ? __fget_files+0x184/0x1c0 [ 126.518771][ T8006] ? mutex_lock+0x58/0x90 [ 126.518802][ T8006] ksys_write+0xda/0x1a0 [ 126.518891][ T8006] __x64_sys_write+0x40/0x50 [ 126.518916][ T8006] x64_sys_call+0x2847/0x3000 [ 126.518948][ T8006] do_syscall_64+0xca/0x2b0 [ 126.518992][ T8006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.519139][ T8006] RIP: 0033:0x7efd3c4af749 [ 126.519160][ T8006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.519240][ T8006] RSP: 002b:00007efd3af0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.519265][ T8006] RAX: ffffffffffffffda RBX: 00007efd3c705fa0 RCX: 00007efd3c4af749 [ 126.519288][ T8006] RDX: 0000000000000030 RSI: 0000200000000640 RDI: 0000000000000005 [ 126.519303][ T8006] RBP: 00007efd3af0f090 R08: 0000000000000000 R09: 0000000000000000 [ 126.519324][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.519340][ T8006] R13: 00007efd3c706038 R14: 00007efd3c705fa0 R15: 00007ffc3e3c7988 [ 126.519363][ T8006] [ 126.819848][ T8009] sch_fq: defrate 0 ignored. [ 127.067939][ T8031] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.091863][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1635'. [ 127.100958][ T8029] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1635'. [ 127.135095][ T8029] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1635'. [ 127.265668][ T8048] sch_fq: defrate 0 ignored. [ 127.282235][ T8046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8046 comm=syz.1.1642 [ 127.306930][ T8046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1642'. [ 127.316120][ T8046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1642'. [ 127.346568][ T8046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1642'. [ 127.355650][ T8046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1642'. [ 127.385987][ T8046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1642'. [ 127.395150][ T8046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1642'. [ 127.691880][ T8023] serio: Serial port ttyS3 [ 127.937281][ T8066] serio: Serial port ttyS3 [ 128.373004][ T8086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8086 comm=syz.0.1653 [ 129.060955][ T8117] tipc: Enabled bearer , priority 0 [ 129.099504][ T8114] tipc: Resetting bearer [ 129.160729][ T8114] tipc: Disabling bearer [ 129.254280][ T8109] serio: Serial port ttyS3 [ 129.728994][ T8132] SET target dimension over the limit! [ 129.737670][ T8132] xt_policy: output policy not valid in PREROUTING and INPUT [ 130.141011][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 130.141031][ T29] audit: type=1326 audit(1767452965.136:10188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.5.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7cdf749 code=0x7ffc0000 [ 130.171340][ T29] audit: type=1326 audit(1767452965.136:10189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.5.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7cdf749 code=0x7ffc0000 [ 130.195042][ T29] audit: type=1326 audit(1767452965.136:10190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.5.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87a7cdf749 code=0x7ffc0000 [ 130.218914][ T29] audit: type=1326 audit(1767452965.136:10191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.5.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7cdf749 code=0x7ffc0000 [ 130.243174][ T29] audit: type=1326 audit(1767452965.136:10192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.5.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7cdf749 code=0x7ffc0000 [ 130.267494][ T29] audit: type=1326 audit(1767452965.146:10193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.5.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f87a7cdf749 code=0x7ffc0000 [ 130.291082][ T29] audit: type=1326 audit(1767452965.146:10194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.5.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7cdf749 code=0x7ffc0000 [ 130.314840][ T29] audit: type=1326 audit(1767452965.146:10195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.5.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87a7cdf749 code=0x7ffc0000 [ 130.338801][ T29] audit: type=1326 audit(1767452965.146:10196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.5.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87a7cdf749 code=0x7ffc0000 [ 130.362543][ T29] audit: type=1326 audit(1767452965.146:10197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8157 comm="syz.5.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87a7cdf749 code=0x7ffc0000 [ 130.387765][ T8160] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.428014][ T8169] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 130.439168][ T8168] IPVS: stopping master sync thread 8169 ... [ 130.447817][ T8160] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.506063][ T8160] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.555198][ T8160] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.602103][ T8180] lo speed is unknown, defaulting to 1000 [ 130.617590][ T3494] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.633817][ T3494] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.642397][ T3494] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.661194][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.677329][ T8180] lo speed is unknown, defaulting to 1000 [ 130.734528][ T8183] siw: device registration error -23 [ 130.798198][ T8191] tipc: Enabled bearer , priority 0 [ 130.806301][ T8189] tipc: Resetting bearer [ 130.840676][ T8189] tipc: Disabling bearer [ 131.020395][ T8199] lo speed is unknown, defaulting to 1000 [ 131.054809][ T8199] lo speed is unknown, defaulting to 1000 [ 131.089040][ T8204] siw: device registration error -23 [ 131.119024][ T8203] lo speed is unknown, defaulting to 1000 [ 131.154861][ T8203] lo speed is unknown, defaulting to 1000 [ 131.189406][ T8206] siw: device registration error -23 [ 131.845807][ T8227] __nla_validate_parse: 8 callbacks suppressed [ 131.845848][ T8227] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1701'. [ 131.954566][ T8232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8232 comm=syz.1.1703 [ 132.032393][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'. [ 132.155615][ T8239] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 132.166558][ T8238] IPVS: stopping master sync thread 8239 ... [ 132.354103][ T8253] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1711'. [ 132.379987][ T8256] SET target dimension over the limit! [ 132.387886][ T8256] xt_policy: output policy not valid in PREROUTING and INPUT [ 132.685636][ T8272] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 132.696697][ T8271] IPVS: stopping master sync thread 8272 ... [ 132.905647][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1721'. [ 132.957774][ T8283] loop9: detected capacity change from 0 to 7 [ 132.965370][ T8283] Buffer I/O error on dev loop9, logical block 0, async page read [ 132.973359][ T8283] Buffer I/O error on dev loop9, logical block 0, async page read [ 132.981220][ T8283] loop9: unable to read partition table [ 132.996607][ T8283] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 132.996607][ T8283] ) failed (rc=-5) [ 133.013318][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.022774][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.031017][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.039495][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.053889][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.069285][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1726'. [ 133.180180][ T8295] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 133.191405][ T8294] IPVS: stopping master sync thread 8295 ... [ 133.285498][ T8261] serio: Serial port ttyS3 [ 133.527414][ T8303] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.824192][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 133.988495][ T8322] sch_fq: defrate 0 ignored. [ 135.061073][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 135.152156][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 135.152174][ T29] audit: type=1400 audit(1767452970.146:10357): avc: denied { connect } for pid=8357 comm="syz.2.1753" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.194257][ T8356] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1752'. [ 135.200287][ T29] audit: type=1400 audit(1767452970.186:10358): avc: denied { write } for pid=8357 comm="syz.2.1753" laddr=fe80::b4a2:36ff:fecc:4f5c lport=7 faddr=fe88::403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.246431][ T29] audit: type=1326 audit(1767452970.236:10359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 135.270067][ T29] audit: type=1326 audit(1767452970.236:10360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 135.293804][ T29] audit: type=1326 audit(1767452970.236:10361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 135.317487][ T29] audit: type=1326 audit(1767452970.236:10362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 135.341045][ T29] audit: type=1326 audit(1767452970.236:10363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 135.364746][ T29] audit: type=1326 audit(1767452970.236:10364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 135.388278][ T29] audit: type=1326 audit(1767452970.236:10365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 135.411843][ T29] audit: type=1326 audit(1767452970.236:10366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8357 comm="syz.2.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 135.907347][ T8344] serio: Serial port ttyS3 [ 136.114112][ T8377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8377 comm=syz.2.1760 [ 136.691793][ T8401] FAULT_INJECTION: forcing a failure. [ 136.691793][ T8401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.704999][ T8401] CPU: 0 UID: 0 PID: 8401 Comm: syz.2.1767 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.705096][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.705113][ T8401] Call Trace: [ 136.705122][ T8401] [ 136.705196][ T8401] __dump_stack+0x1d/0x30 [ 136.705228][ T8401] dump_stack_lvl+0x95/0xd0 [ 136.705252][ T8401] dump_stack+0x15/0x1b [ 136.705273][ T8401] should_fail_ex+0x265/0x280 [ 136.705303][ T8401] should_fail+0xb/0x20 [ 136.705425][ T8401] should_fail_usercopy+0x1a/0x20 [ 136.705454][ T8401] _copy_from_user+0x1c/0xb0 [ 136.705484][ T8401] snd_seq_write+0x1d3/0x530 [ 136.705593][ T8401] ? __pfx_snd_seq_write+0x10/0x10 [ 136.705628][ T8401] vfs_write+0x269/0x960 [ 136.705647][ T8401] ? __rcu_read_unlock+0x4f/0x70 [ 136.705668][ T8401] ? __fget_files+0x184/0x1c0 [ 136.705695][ T8401] ksys_write+0xda/0x1a0 [ 136.705731][ T8401] __x64_sys_write+0x40/0x50 [ 136.705751][ T8401] x64_sys_call+0x2847/0x3000 [ 136.705814][ T8401] do_syscall_64+0xca/0x2b0 [ 136.705850][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.705873][ T8401] RIP: 0033:0x7ff59bf6f749 [ 136.705888][ T8401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.705982][ T8401] RSP: 002b:00007ff59a9cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.706002][ T8401] RAX: ffffffffffffffda RBX: 00007ff59c1c5fa0 RCX: 00007ff59bf6f749 [ 136.706015][ T8401] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 136.706027][ T8401] RBP: 00007ff59a9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 136.706040][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.706109][ T8401] R13: 00007ff59c1c6038 R14: 00007ff59c1c5fa0 R15: 00007ffc91beba58 [ 136.706129][ T8401] [ 137.038286][ T8412] netlink: 21 bytes leftover after parsing attributes in process `syz.5.1772'. [ 137.417366][ T8442] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 137.600066][ T8455] IPVS: stopping master sync thread 8456 ... [ 137.606295][ T8456] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 138.381295][ T8483] sch_fq: defrate 0 ignored. [ 138.799646][ T8496] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1802'. [ 138.898160][ T8507] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.924648][ T8505] tipc: Enabled bearer , priority 0 [ 138.935904][ T8507] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.948853][ T8501] tipc: Resetting bearer [ 138.989521][ T8501] tipc: Disabling bearer [ 139.008212][ T8507] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.016921][ T8510] serio: Serial port ttyS3 [ 139.117178][ T8517] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 139.117562][ T8516] IPVS: stopping master sync thread 8517 ... [ 139.149624][ T8514] serio: Serial port ttyS3 [ 139.175474][ T8507] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.253400][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.292318][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.320905][ T8526] lo speed is unknown, defaulting to 1000 [ 139.328346][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.393671][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.411641][ T8526] lo speed is unknown, defaulting to 1000 [ 139.587126][ T8535] netlink: 21 bytes leftover after parsing attributes in process `syz.5.1816'. [ 139.775993][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1820'. [ 139.784942][ T8543] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1820'. [ 139.818308][ T8543] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1820'. [ 139.870023][ T8546] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1822'. [ 140.003843][ T8553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8553 comm=syz.1.1824 [ 140.185079][ T29] kauditd_printk_skb: 1061 callbacks suppressed [ 140.185096][ T29] audit: type=1400 audit(1767452975.156:11428): avc: denied { getopt } for pid=8561 comm="syz.0.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.236379][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1831'. [ 140.267818][ T29] audit: type=1326 audit(1767452975.266:11429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3c4af749 code=0x7ffc0000 [ 140.300445][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 140.309423][ T8574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1832'. [ 140.353660][ T29] audit: type=1326 audit(1767452975.286:11430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3c4af749 code=0x7ffc0000 [ 140.377247][ T29] audit: type=1326 audit(1767452975.286:11431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3c4af749 code=0x7ffc0000 [ 140.401086][ T29] audit: type=1326 audit(1767452975.286:11432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3c4af749 code=0x7ffc0000 [ 140.424733][ T29] audit: type=1326 audit(1767452975.286:11433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7efd3c4af749 code=0x7ffc0000 [ 140.448389][ T29] audit: type=1326 audit(1767452975.286:11434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3c4af749 code=0x7ffc0000 [ 140.471989][ T29] audit: type=1326 audit(1767452975.286:11435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3c4af749 code=0x7ffc0000 [ 140.495580][ T29] audit: type=1326 audit(1767452975.286:11436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3c4af749 code=0x7ffc0000 [ 140.519266][ T29] audit: type=1326 audit(1767452975.286:11437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8573 comm="syz.1.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3c4af749 code=0x7ffc0000 [ 141.154480][ T8570] serio: Serial port ttyS3 [ 141.595490][ T8612] syz.0.1847 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 141.836697][ T8608] serio: Serial port ttyS3 [ 141.928926][ T8624] lo speed is unknown, defaulting to 1000 [ 141.965247][ T8624] lo speed is unknown, defaulting to 1000 [ 142.039853][ T8624] bond0 (unregistering): Released all slaves [ 142.244994][ T8639] tipc: Enabled bearer , priority 0 [ 142.252678][ T8638] tipc: Resetting bearer [ 142.287807][ T8638] tipc: Disabling bearer [ 142.802965][ T8656] __nla_validate_parse: 6 callbacks suppressed [ 142.802981][ T8656] netlink: 21 bytes leftover after parsing attributes in process `syz.5.1863'. [ 142.917462][ T8661] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 142.924129][ T8661] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 142.932350][ T8661] vhci_hcd vhci_hcd.0: Device attached [ 142.967378][ T8663] vhci_hcd: connection closed [ 142.967566][ T53] vhci_hcd vhci_hcd.0: stop threads [ 142.977646][ T53] vhci_hcd vhci_hcd.0: release socket [ 142.983080][ T53] vhci_hcd vhci_hcd.0: disconnect device [ 143.084277][ T8669] lo speed is unknown, defaulting to 1000 [ 143.222599][ T8669] lo speed is unknown, defaulting to 1000 [ 143.319951][ T8671] siw: device registration error -23 [ 143.633670][ T8676] serio: Serial port ttyS3 [ 143.844969][ T8680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8680 comm=syz.1.1868 [ 144.384724][ T8696] IPVS: stopping master sync thread 8697 ... [ 144.730771][ T8693] serio: Serial port ttyS3 [ 145.193731][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 145.193747][ T29] audit: type=1400 audit(1767452980.196:11762): avc: denied { connect } for pid=8717 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.277205][ T29] audit: type=1400 audit(1767452980.276:11763): avc: denied { create } for pid=8717 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.333665][ T29] audit: type=1400 audit(1767452980.276:11764): avc: denied { connect } for pid=8717 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.353515][ T29] audit: type=1400 audit(1767452980.276:11765): avc: denied { bind } for pid=8717 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.372916][ T29] audit: type=1400 audit(1767452980.276:11766): avc: denied { ioctl } for pid=8717 comm="syz.0.1881" path="socket:[29372]" dev="sockfs" ino=29372 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.397715][ T29] audit: type=1400 audit(1767452980.276:11767): avc: denied { write } for pid=8717 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.521139][ T8724] netlink: 21 bytes leftover after parsing attributes in process `syz.5.1883'. [ 145.568884][ T29] audit: type=1400 audit(1767452980.566:11768): avc: denied { write } for pid=8725 comm="syz.1.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 145.722171][ T29] audit: type=1400 audit(1767452980.616:11769): avc: denied { execmem } for pid=8727 comm="syz.5.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 145.799379][ T29] audit: type=1400 audit(1767452980.786:11770): avc: denied { map } for pid=8731 comm="syz.1.1886" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 145.823794][ T29] audit: type=1400 audit(1767452980.786:11771): avc: denied { read write } for pid=8731 comm="syz.1.1886" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 145.860252][ T8730] lo speed is unknown, defaulting to 1000 [ 145.898033][ T8730] lo speed is unknown, defaulting to 1000 [ 146.816429][ T8762] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.849640][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1897'. [ 146.875574][ T8762] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.915331][ T8762] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.975467][ T8762] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.057681][ T1007] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.079453][ T1007] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.101411][ T1007] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.129942][ T1007] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.236747][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1901'. [ 147.245713][ T8771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1901'. [ 147.288719][ T8776] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1901'. [ 147.569617][ T8781] lo speed is unknown, defaulting to 1000 [ 147.606374][ T8781] lo speed is unknown, defaulting to 1000 [ 147.673316][ T8795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1909'. [ 147.694975][ T8793] bond0 (unregistering): Released all slaves [ 147.707289][ T8789] serio: Serial port ttyS3 [ 148.059204][ T8790] serio: Serial port ttyS3 [ 148.121656][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.298213][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'. [ 148.307271][ T8809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1914'. [ 148.328947][ T8809] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1914'. [ 148.575037][ T8810] lo speed is unknown, defaulting to 1000 [ 148.650407][ T31] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.684650][ T8810] lo speed is unknown, defaulting to 1000 [ 148.737849][ T31] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.779324][ T31] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.958402][ T31] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.973594][ T8810] chnl_net:caif_netlink_parms(): no params data found [ 149.049854][ T8841] lo speed is unknown, defaulting to 1000 [ 149.160376][ T8845] bond0 (unregistering): Released all slaves [ 149.170394][ T8841] lo speed is unknown, defaulting to 1000 [ 149.222433][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.229615][ T8810] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.286439][ T8810] bridge_slave_0: entered allmulticast mode [ 149.310247][ T8810] bridge_slave_0: entered promiscuous mode [ 149.362990][ T31] bridge_slave_1: left allmulticast mode [ 149.368765][ T31] bridge_slave_1: left promiscuous mode [ 149.374626][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.403438][ T31] bridge_slave_0: left allmulticast mode [ 149.409186][ T31] bridge_slave_0: left promiscuous mode [ 149.415097][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.459132][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1924'. [ 149.468279][ T8859] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1924'. [ 149.543748][ T8867] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1924'. [ 149.676155][ T31] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.737241][ T31] bond_slave_0: left promiscuous mode [ 149.750306][ T8826] serio: Serial port ttyS3 [ 149.758649][ T31] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.769782][ T31] bond_slave_1: left promiscuous mode [ 149.776158][ T31] $H (unregistering): Released all slaves [ 149.785475][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.792642][ T8810] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.799923][ T8810] bridge_slave_1: entered allmulticast mode [ 149.808057][ T8810] bridge_slave_1: entered promiscuous mode [ 149.829341][ T31] tipc: Left network mode [ 149.867281][ T8810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.884809][ T8810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.945617][ T8810] team0: Port device team_slave_0 added [ 149.969609][ T8810] team0: Port device team_slave_1 added [ 149.984456][ T31] hsr_slave_0: left promiscuous mode [ 149.994664][ T31] hsr_slave_1: left promiscuous mode [ 150.005966][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.013409][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.034308][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.041842][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.161068][ T31] team0 (unregistering): Port device team_slave_1 removed [ 150.188874][ T31] team0 (unregistering): Port device team_slave_0 removed [ 150.263477][ T53] smc: removing ib device sz1 [ 150.282283][ T36] lo speed is unknown, defaulting to 1000 [ 150.288132][ T36] sz1: Port: 1 Link DOWN [ 150.319459][ T8810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.326625][ T8810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.352619][ T8810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.434452][ T8810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.441509][ T8810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.467703][ T8810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.549361][ T8884] serio: Serial port ttyS3 [ 150.674231][ T8810] hsr_slave_0: entered promiscuous mode [ 150.796726][ T8810] hsr_slave_1: entered promiscuous mode [ 150.802654][ T8810] debugfs: 'hsr0' already exists in 'hsr' [ 150.808455][ T8810] Cannot create hsr debugfs directory [ 151.177348][ T8810] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 151.222439][ T8810] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 151.245208][ T8810] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 151.255212][ T8810] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 151.301575][ T8951] lo speed is unknown, defaulting to 1000 [ 151.315748][ T8810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.341339][ T8810] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.402444][ T8951] bond0 (unregistering): Released all slaves [ 151.413063][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.420208][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.442938][ T29] kauditd_printk_skb: 646 callbacks suppressed [ 151.442953][ T29] audit: type=1400 audit(1767452986.436:12418): avc: denied { ioctl } for pid=8969 comm="syz.5.1941" path="socket:[31812]" dev="sockfs" ino=31812 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.478330][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.485517][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.512909][ T8810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.523408][ T8810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.550387][ T8974] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1942'. [ 151.583897][ T29] audit: type=1326 audit(1767452986.576:12419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 151.607715][ T29] audit: type=1326 audit(1767452986.586:12420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 151.631344][ T29] audit: type=1326 audit(1767452986.586:12421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 151.718319][ T29] audit: type=1326 audit(1767452986.586:12422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 151.742052][ T29] audit: type=1326 audit(1767452986.586:12423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 151.765641][ T29] audit: type=1326 audit(1767452986.586:12424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 151.789251][ T29] audit: type=1326 audit(1767452986.586:12425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 151.812881][ T29] audit: type=1326 audit(1767452986.586:12426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 151.836438][ T29] audit: type=1326 audit(1767452986.586:12427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.2.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59bf6f749 code=0x7ffc0000 [ 151.881819][ T8810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.180176][ T8810] veth0_vlan: entered promiscuous mode [ 152.188814][ T8810] veth1_vlan: entered promiscuous mode [ 152.208304][ T8810] veth0_macvtap: entered promiscuous mode [ 152.225363][ T8810] veth1_macvtap: entered promiscuous mode [ 152.254252][ T8810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.275278][ T8810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.298463][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.319211][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.335996][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.353740][ T411] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.388082][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1911'. [ 152.446564][ T9022] $H: renamed from bond0 (while UP) [ 152.454347][ T9022] $H: entered promiscuous mode [ 152.459418][ T9022] bond_slave_0: entered promiscuous mode [ 152.465242][ T9022] bond_slave_1: entered promiscuous mode [ 152.581652][ T9029] sch_fq: defrate 0 ignored. [ 153.134640][ T9046] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1960'. [ 153.163463][ T9044] lo speed is unknown, defaulting to 1000 [ 153.205611][ T9048] siw: device registration error -23 [ 154.065702][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1976'. [ 154.074698][ T9089] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1976'. [ 154.089854][ T9089] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1976'. [ 154.353986][ T9090] serio: Serial port ttyS3 [ 155.040836][ T9109] lo speed is unknown, defaulting to 1000 [ 155.278872][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1987'. [ 155.288045][ T9120] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1987'. [ 155.304649][ T9120] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1987'. [ 155.445506][ T9131] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 155.770619][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2000'. [ 155.779571][ T9148] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2000'. [ 155.805694][ T9148] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2000'. [ 156.232552][ T9171] lo speed is unknown, defaulting to 1000 [ 156.251662][ T9176] tipc: Enabling of bearer rejected, already enabled [ 156.308980][ T9180] xt_policy: output policy not valid in PREROUTING and INPUT [ 156.332546][ T9177] siw: device registration error -23 [ 156.513212][ T9146] serio: Serial port ttyS3 [ 156.558979][ T9196] tipc: Enabled bearer , priority 0 [ 156.595442][ T9195] tipc: Disabling bearer [ 156.632093][ T9194] serio: Serial port ttyS3 [ 156.699766][ T29] kauditd_printk_skb: 860 callbacks suppressed [ 156.699781][ T29] audit: type=1400 audit(1767452991.696:13288): avc: denied { write } for pid=9199 comm="syz.2.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 156.799874][ T29] audit: type=1326 audit(1767452991.716:13289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.0.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b88aef749 code=0x7ffc0000 [ 156.823479][ T29] audit: type=1326 audit(1767452991.716:13290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.0.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b88aef749 code=0x7ffc0000 [ 156.847435][ T29] audit: type=1326 audit(1767452991.716:13291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.0.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b88aef749 code=0x7ffc0000 [ 156.871234][ T29] audit: type=1326 audit(1767452991.716:13292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.0.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4b88aef749 code=0x7ffc0000 [ 156.894821][ T29] audit: type=1326 audit(1767452991.716:13293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.0.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b88aef749 code=0x7ffc0000 [ 156.918531][ T29] audit: type=1326 audit(1767452991.716:13294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.0.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b88aef749 code=0x7ffc0000 [ 156.942082][ T29] audit: type=1400 audit(1767452991.716:13295): avc: denied { create } for pid=9200 comm="syz.0.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 156.961890][ T29] audit: type=1326 audit(1767452991.716:13296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.0.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b88aef749 code=0x7ffc0000 [ 156.985441][ T29] audit: type=1326 audit(1767452991.716:13297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.0.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4b88aef749 code=0x7ffc0000 [ 157.111394][ T9219] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2028'. [ 157.180359][ T9224] tipc: Enabled bearer , priority 0 [ 157.224160][ T9210] tipc: Resetting bearer [ 157.274705][ T9210] tipc: Disabling bearer [ 157.318907][ T9227] tipc: Enabled bearer , priority 0 [ 157.338491][ T9226] tipc: Disabling bearer [ 157.466399][ T9242] bridge_slave_0: left allmulticast mode [ 157.472203][ T9242] bridge_slave_0: left promiscuous mode [ 157.478077][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.492655][ T9242] bridge_slave_1: left allmulticast mode [ 157.498393][ T9242] bridge_slave_1: left promiscuous mode [ 157.504100][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.533190][ T9248] loop6: detected capacity change from 0 to 128 [ 157.545905][ T9248] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.560608][ T9242] $H: (slave bond_slave_0): Releasing backup interface [ 157.575268][ T9248] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.585425][ T9242] bond_slave_0: left promiscuous mode [ 157.596883][ T9248] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.609872][ T9242] $H: (slave bond_slave_1): Releasing backup interface [ 157.635363][ T9242] bond_slave_1: left promiscuous mode [ 157.649727][ T9242] team0: Port device team_slave_0 removed [ 157.661100][ T9242] team0: Port device team_slave_1 removed [ 157.669060][ T9242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.676661][ T9242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.686835][ T9242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.694306][ T9242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.705993][ T9242] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.749492][ T9248] ================================================================== [ 157.757654][ T9248] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 157.765003][ T9248] [ 157.767355][ T9248] write to 0xffff88811b408e14 of 4 bytes by task 9254 on cpu 0: [ 157.775017][ T9248] xas_clear_mark+0x16b/0x180 [ 157.779785][ T9248] __folio_start_writeback+0x231/0x340 [ 157.785307][ T9248] mpage_writepages+0xd18/0x1250 [ 157.790303][ T9248] fat_writepages+0x24/0x30 [ 157.794864][ T9248] do_writepages+0x1c6/0x310 [ 157.799500][ T9248] file_write_and_wait_range+0x156/0x2c0 [ 157.805167][ T9248] __generic_file_fsync+0x46/0x160 [ 157.810318][ T9248] fat_file_fsync+0x49/0x100 [ 157.814947][ T9248] vfs_fsync_range+0x10d/0x130 [ 157.819745][ T9248] generic_file_write_iter+0x1b8/0x2f0 [ 157.825250][ T9248] iter_file_splice_write+0x66b/0xa20 [ 157.830655][ T9248] direct_splice_actor+0x156/0x2a0 [ 157.835866][ T9248] splice_direct_to_actor+0x312/0x680 [ 157.841274][ T9248] do_splice_direct+0xda/0x150 [ 157.846068][ T9248] do_sendfile+0x380/0x650 [ 157.850526][ T9248] __x64_sys_sendfile64+0x105/0x150 [ 157.855760][ T9248] x64_sys_call+0x2db1/0x3000 [ 157.860475][ T9248] do_syscall_64+0xca/0x2b0 [ 157.865022][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.870945][ T9248] [ 157.873293][ T9248] read to 0xffff88811b408e14 of 4 bytes by task 9248 on cpu 1: [ 157.880863][ T9248] xas_find_marked+0x5dc/0x620 [ 157.885679][ T9248] find_get_entry+0x5d/0x380 [ 157.890298][ T9248] filemap_get_folios_tag+0x92/0x210 [ 157.895604][ T9248] filemap_fdatawait_range+0x88/0x1d0 [ 157.900997][ T9248] __writeback_single_inode+0xdb/0x7c0 [ 157.906491][ T9248] writeback_single_inode+0x16d/0x3f0 [ 157.911900][ T9248] sync_inode_metadata+0x5b/0x90 [ 157.916869][ T9248] __generic_file_fsync+0x109/0x160 [ 157.922089][ T9248] fat_file_fsync+0x49/0x100 [ 157.926701][ T9248] vfs_fsync_range+0x10d/0x130 [ 157.931484][ T9248] generic_file_write_iter+0x1b8/0x2f0 [ 157.936965][ T9248] iter_file_splice_write+0x66b/0xa20 [ 157.942355][ T9248] direct_splice_actor+0x156/0x2a0 [ 157.947484][ T9248] splice_direct_to_actor+0x312/0x680 [ 157.952875][ T9248] do_splice_direct+0xda/0x150 [ 157.957662][ T9248] do_sendfile+0x380/0x650 [ 157.962105][ T9248] __x64_sys_sendfile64+0x105/0x150 [ 157.967323][ T9248] x64_sys_call+0x2db1/0x3000 [ 157.972048][ T9248] do_syscall_64+0xca/0x2b0 [ 157.976585][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.982503][ T9248] [ 157.984845][ T9248] value changed: 0x0e000021 -> 0x04000021 [ 157.990580][ T9248] [ 157.992913][ T9248] Reported by Kernel Concurrency Sanitizer on: [ 157.999084][ T9248] CPU: 1 UID: 0 PID: 9248 Comm: syz.6.2037 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.008822][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.018922][ T9248] ================================================================== [ 158.355952][ T3494] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)